public sealed class EncryptionConfig : IMessage<EncryptionConfig>, IEquatable<EncryptionConfig>, IDeepCloneable<EncryptionConfig>, IBufferMessage, IMessage
Reference documentation and code samples for the Google Cloud Dataproc v1 API class EncryptionConfig.
Optional. The Cloud KMS key resource name to use for persistent disk
encryption for all instances in the cluster. See Use CMEK with cluster
data
for more information.
Optional. The Cloud KMS key resource name to use for cluster persistent
disk and job argument encryption. See Use CMEK with cluster data
for more information.
When this key resource name is provided, the following job arguments of
the following job types submitted to the cluster are encrypted using CMEK:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis webpage provides reference documentation for the \u003ccode\u003eEncryptionConfig\u003c/code\u003e class within the Google Cloud Dataproc v1 API, detailing its usage for configuring cluster encryption settings.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eEncryptionConfig\u003c/code\u003e class is a sealed class, implementing multiple interfaces including \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e, and inheriting from the base \u003ccode\u003eobject\u003c/code\u003e class.\u003c/p\u003e\n"],["\u003cp\u003eThe document lists multiple versions of the API, starting from the latest \u003ccode\u003e5.17.0\u003c/code\u003e down to \u003ccode\u003e3.1.0\u003c/code\u003e, showing that older versions are available for reference.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eEncryptionConfig\u003c/code\u003e class allows for the specification of Cloud KMS key resource names for both persistent disk encryption (using \u003ccode\u003eGcePdKmsKeyName\u003c/code\u003e) and for encrypting specific job arguments (using \u003ccode\u003eKmsKey\u003c/code\u003e).\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eKmsKeyAsCryptoKeyName\u003c/code\u003e property provides a \u003ccode\u003eCryptoKeyName\u003c/code\u003e-typed view of the \u003ccode\u003eKmsKey\u003c/code\u003e property, aiding in resource name handling.\u003c/p\u003e\n"]]],[],null,["# Google Cloud Dataproc v1 API - Class EncryptionConfig (5.20.0)\n\nVersion latestkeyboard_arrow_down\n\n- [5.20.0 (latest)](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/latest/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.19.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.19.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.18.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.18.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.17.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.17.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.16.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.16.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.15.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.15.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.14.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.14.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.13.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.13.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.12.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.12.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.11.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.11.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.10.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.10.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.9.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.9.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.8.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.8.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.7.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.7.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.6.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.6.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.5.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.5.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.4.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.4.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.3.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.3.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.2.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.2.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.1.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.1.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [5.0.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/5.0.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [4.0.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/4.0.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [3.4.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/3.4.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [3.3.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/3.3.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [3.2.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/3.2.0/Google.Cloud.Dataproc.V1.EncryptionConfig)\n- [3.1.0](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/3.1.0/Google.Cloud.Dataproc.V1.EncryptionConfig) \n\n public sealed class EncryptionConfig : IMessage\u003cEncryptionConfig\u003e, IEquatable\u003cEncryptionConfig\u003e, IDeepCloneable\u003cEncryptionConfig\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Google Cloud Dataproc v1 API class EncryptionConfig.\n\nEncryption settings for the cluster. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e EncryptionConfig \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[EncryptionConfig](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/latest/Google.Cloud.Dataproc.V1.EncryptionConfig), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[EncryptionConfig](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/latest/Google.Cloud.Dataproc.V1.EncryptionConfig), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[EncryptionConfig](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/latest/Google.Cloud.Dataproc.V1.EncryptionConfig), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.Dataproc.V1](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/latest/Google.Cloud.Dataproc.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.Dataproc.V1.dll\n\nConstructors\n------------\n\n### EncryptionConfig()\n\n public EncryptionConfig()\n\n### EncryptionConfig(EncryptionConfig)\n\n public EncryptionConfig(EncryptionConfig other)\n\nProperties\n----------\n\n### GcePdKmsKeyName\n\n public string GcePdKmsKeyName { get; set; }\n\nOptional. The Cloud KMS key resource name to use for persistent disk\nencryption for all instances in the cluster. See [Use CMEK with cluster\ndata](https://cloud.google.com//dataproc/docs/concepts/configuring-clusters/customer-managed-encryption#use_cmek_with_cluster_data)\nfor more information.\n\n### KmsKey\n\n public string KmsKey { get; set; }\n\nOptional. The Cloud KMS key resource name to use for cluster persistent\ndisk and job argument encryption. See [Use CMEK with cluster data](https://cloud.google.com//dataproc/docs/concepts/configuring-clusters/customer-managed-encryption#use_cmek_with_cluster_data)\nfor more information.\n\nWhen this key resource name is provided, the following job arguments of\nthe following job types submitted to the cluster are encrypted using CMEK:\n\n- [FlinkJob\n args](https://cloud.google.com/dataproc/docs/reference/rest/v1/FlinkJob)\n- [HadoopJob\n args](https://cloud.google.com/dataproc/docs/reference/rest/v1/HadoopJob)\n- [SparkJob\n args](https://cloud.google.com/dataproc/docs/reference/rest/v1/SparkJob)\n- [SparkRJob\n args](https://cloud.google.com/dataproc/docs/reference/rest/v1/SparkRJob)\n- [PySparkJob\n args](https://cloud.google.com/dataproc/docs/reference/rest/v1/PySparkJob)\n- [SparkSqlJob](https://cloud.google.com/dataproc/docs/reference/rest/v1/SparkSqlJob) scriptVariables and queryList.queries\n- [HiveJob](https://cloud.google.com/dataproc/docs/reference/rest/v1/HiveJob) scriptVariables and queryList.queries\n- [PigJob](https://cloud.google.com/dataproc/docs/reference/rest/v1/PigJob) scriptVariables and queryList.queries\n- [PrestoJob](https://cloud.google.com/dataproc/docs/reference/rest/v1/PrestoJob) scriptVariables and queryList.queries\n\n### KmsKeyAsCryptoKeyName\n\n public CryptoKeyName KmsKeyAsCryptoKeyName { get; set; }\n\n[CryptoKeyName](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/latest/Google.Cloud.Dataproc.V1.CryptoKeyName)-typed view over the [KmsKey](/dotnet/docs/reference/Google.Cloud.Dataproc.V1/latest/Google.Cloud.Dataproc.V1.EncryptionConfig#Google_Cloud_Dataproc_V1_EncryptionConfig_KmsKey) resource name property."]]
