added cryptoHashConfig to deidentifyTemplate (#8084) (#14870)

* added cryptoHashConfig to primitiveTransformation in infoTypeTransformations * removed trailing space line 633 * stash data to remove linting issue and modified tests Signed-off-by: Modular Magician <magic-modules@google.com>
hashicorp · Jun 9, 2023 · 7c9671e · 7c9671e
1 parent 86324da
commit 7c9671e
Show file tree

Hide file tree

Showing 4 changed files with 438 additions and 0 deletions.
diff --git a/.changelog/8084.txt b/.changelog/8084.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+dlp: added `crypto_hash_config` to `google_data_loss_prevention_deidentify_template`
+```
diff --git a/google/resource_data_loss_prevention_deidentify_template_test.go b/google/resource_data_loss_prevention_deidentify_template_test.go
@@ -1245,6 +1245,38 @@ resource "google_data_loss_prevention_deidentify_template" "config" {
         }
       }
 
+      transformations {
+        info_types {
+          name = "CRYPTO_HASH_TRANSIENT_EXAMPLE"
+        }
+
+        primitive_transformation {
+          crypto_hash_config {
+            crypto_key {
+              transient {
+                name = "beep" # Copy-pasting from existing test that uses this field
+              }
+            }
+          }
+        }
+      }
+
+      transformations {
+        info_types {
+          name = "CRYPTO_HASH_UNWRAPPED_EXAMPLE"
+        }
+
+        primitive_transformation {
+          crypto_hash_config {
+            crypto_key {
+              unwrapped {
+                key     = "VVdWVWFGZHRXbkUwZERkM0lYb2xRdz09"
+              }
+            }
+          }
+        }
+      }
+
       transformations {
         info_types {
           name = "REDACT_EXAMPLE"
@@ -1371,6 +1403,40 @@ resource "google_data_loss_prevention_deidentify_template" "config" {
         }
       }
 
+      transformations {
+        info_types {
+          name = "CRYPTO_HASH_TRANSIENT_UPDATED_EXAMPLE"
+        }
+
+        primitive_transformation {
+          crypto_hash_config {
+            crypto_key {
+              transient {
+                # update value
+                name = "beepy-beep-updated"
+              }
+            }
+          }
+        }
+      }
+
+      transformations {
+        info_types {
+          name = "CRYPTO_HASH_WRAPPED_EXAMPLE"
+        }
+
+        primitive_transformation {
+          crypto_hash_config {
+            crypto_key {
+              kms_wrapped {
+                wrapped_key     = "B64/WRAPPED/TOKENIZATION/KEY"
+                crypto_key_name = "%{kms_key_name}"
+              }
+            }
+          }
+        }
+      }
+
       # update to remove transformations block using redact_config
     }
   }