Logs relating to the retrieval of key encryption keys (KEKs)

The log fields described below provide information on the retrieval status of KEKs. These logs are shown when the service starts and when the KEKs described in Renewing a symmetric encryption KEK are refreshed.

Field

Description

Type

Examples

kek_id

Identifier of the KEK used.

String

"bbc9cd0b-803c-4d9c-93f9-b43bdfc0bf96"

is_active_kek

Active KEK used for encryption.

String

Prescribed values:

"true", "false"

source

Source of the KEK.

String

Prescribed values:

"kms", "local"