Encrypting the Bulk Imported Data (privilegedwrap)
Bulk import allows Google CSE admins to import sensitive and encrypted files from third-party storage into Google Drive. To preserve the confidentiality of user data, bulk import uses Client Side Encryption and the Google Drive API.
The POST https://<base_url>/privilegedwrap encrypts the bulk data imported to Google Drive by a domain admin. This call returns a wrapped DEK.
Note
Ensure that you have completed the Additional Prerequisites for Bulk Import.
Request Parameters
| Parameter | Type | Description |
|---|---|---|
| key | string | Base64 encoded DEK. |
| perimeter_id | string | An optional value, which can be used to specify the perimeter to check when unwrapping, placed at the document location. |
| resource_name | string | An identifier of the object encrypted by DEK. |
| authentication | object | A JWT issued by a third-party asserting the identity of the user. |
| reason | string | Additional information about the operation. |
Example Request
{
key: "wHrlNOTI9mU6PBdqiq7EQA==",
perimeter_id: "",
resource_name: "//googleapis.com/drive/files/1dpRssd7...",
authentication: "eyJhbGciOi…",
reason: "admin import",
}
Example Response
{
wrapped_key: "3asDgsi…"
}
Response Codes
| Response Code | Description |
|---|---|
| 2xx | Success |
| 4xx | Client errors |
Refer to HTTP status codes for details.
