The data is encrypted at rest with a key that is
managed by the customer. The active version of the key. kms_key_version
will be populated, and encryption_status may be populated.
GoogleDefaultEncryption
The data is encrypted at rest with a key that is
fully managed by Google. No key version or status will be populated.
This is the default state.
Unspecified
Encryption type was not specified, though data at rest remains encrypted.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe latest version available is 5.0.0-beta05, representing the most current beta release.\u003c/p\u003e\n"],["\u003cp\u003eVersion 3.8.0 is listed as the version for the current page.\u003c/p\u003e\n"],["\u003cp\u003eThe document lists various versions of the Google.Cloud.Spanner.Admin.Database.V1 package, including both beta and stable releases, ranging from 3.5.0 to 5.0.0-beta05.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eType\u003c/code\u003e enum within the Google.Cloud.Spanner.Admin.Database.V1 namespace defines three encryption types: \u003ccode\u003eCustomerManagedEncryption\u003c/code\u003e, \u003ccode\u003eGoogleDefaultEncryption\u003c/code\u003e, and \u003ccode\u003eUnspecified\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eCustomerManagedEncryption\u003c/code\u003e uses customer-managed keys, \u003ccode\u003eGoogleDefaultEncryption\u003c/code\u003e uses Google-managed keys, and \u003ccode\u003eUnspecified\u003c/code\u003e indicates that the encryption type was not defined.\u003c/p\u003e\n"]]],[],null,[]]
