Share via


EncryptionWithCmk Class

Describes a policy that determines how resources within the search service are to be encrypted with customer managed keys.

Variables are only populated by the server, and will be ignored when sending a request.

Constructor

EncryptionWithCmk(*, enforcement: str | _models.SearchEncryptionWithCmk | None = None, **kwargs: Any)

Keyword-Only Parameters

Name Description
enforcement

Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. Known values are: "Disabled", "Enabled", and "Unspecified".

Default value: None

Variables

Name Description
enforcement

Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. Known values are: "Disabled", "Enabled", and "Unspecified".

encryption_compliance_status

Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. Known values are: "Compliant" and "NonCompliant".