/*
* Copyright 2008-present MongoDB, Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.mongodb.client.model.vault;
import org.bson.BsonDocument;
import java.util.List;
The options for creating a data key.
Since: 3.11
/**
* The options for creating a data key.
*
* @since 3.11
*/
public class DataKeyOptions {
private List<String> keyAltNames;
private BsonDocument masterKey;
Set the alternate key names.
Params: - keyAltNames – a list of alternate key names
See Also: Returns: this
/**
* Set the alternate key names.
*
* @param keyAltNames a list of alternate key names
* @return this
* @see #getKeyAltNames()
*/
public DataKeyOptions keyAltNames(final List<String> keyAltNames) {
this.keyAltNames = keyAltNames;
return this;
}
Sets the master key document.
Params: - masterKey – the master key document
See Also: Returns: this
/**
* Sets the master key document.
*
* @param masterKey the master key document
* @return this
* @see #getMasterKey()
*/
public DataKeyOptions masterKey(final BsonDocument masterKey) {
this.masterKey = masterKey;
return this;
}
Gets the alternate key names.
An optional list of alternate names used to reference a key. If a key is created with alternate names, then encryption may refer
to the key by the unique alternate name instead of by _id.
Returns: the list of alternate key names
/**
* Gets the alternate key names.
*
* <p>
* An optional list of alternate names used to reference a key. If a key is created with alternate names, then encryption may refer
* to the key by the unique alternate name instead of by _id.
* </p>
*
* @return the list of alternate key names
*/
public List<String> getKeyAltNames() {
return keyAltNames;
}
Gets the master key document
The masterKey identifies a KMS-specific key used to encrypt the new data key. If the kmsProvider is "aws" it is required and
must have the following fields:
- region: a String containing the AWS region in which to locate the master key
- key: a String containing the Amazon Resource Name (ARN) to the AWS customer master key
If the kmsProvider is "local" the masterKey is not applicable.
Returns: the master key document
/**
* Gets the master key document
*
* <p>
* The masterKey identifies a KMS-specific key used to encrypt the new data key. If the kmsProvider is "aws" it is required and
* must have the following fields:
* </p>
* <ul>
* <li>region: a String containing the AWS region in which to locate the master key</li>
* <li>key: a String containing the Amazon Resource Name (ARN) to the AWS customer master key</li>
* </ul>
* <p>
* If the kmsProvider is "local" the masterKey is not applicable.
* </p>
* @return the master key document
*/
public BsonDocument getMasterKey() {
return masterKey;
}
@Override
public String toString() {
return "DataKeyOptions{"
+ "keyAltNames=" + keyAltNames
+ ", masterKey=" + masterKey
+ '}';
}
}