Snap type: | Transform |
---|
Description: | This Snap encrypts individual field values in the input documents.Expected upstream Snaps: Any Snap with a document output viewExpected downstream Snaps: Any Snap with a document input viewExpected input: Stream of documents with a nested or flat map dataExpected output: Same as input documents with specified field values encrypted
|
---|
Prerequisites: | None |
---|
Support and limitations: | |
---|
Account: | This Snap uses account references created on the Accounts page of SnapLogic Manager to handle access to this endpoint. See Configuring Transform Accounts for information on setting up this type of account.KeyStore account or Passphrase-based Key account can used.Use KeyStore account for X.509 key or secret (symmetric) key.If no account is selected, the Key property should have an expression to be evaluated with the input document or the pipeline parameter. |
---|
Views: | Input | This Snap has exactly one document input view. |
---|
Output | This Snap has exactly one document output view. |
---|
Error | This Snap has at most one document error view and produces zero or more documents in the view. |
---|
|
---|
Settings |
---|
Label | |
---|
Fields to encrypt | Required. A table for JSON-path expressions to fields to encrypt. Use the suggest button to select the field to encrypt. |
---|
Transform type | The cryptographic transformation to perform, expressed as 'algorithm/mode/padding'. Use the suggest button to select a desired transformation type. When set to "auto", the transformation will be automatically selected based on the type of encryption key using the following table:Key Algorithm | Transformation |
---|
AES | AES/GCM/NoPadding | DES | DES/CBC/PKCS5Padding | DESede | DESede/CBC/PKCS5Padding | RSA | RSA/None/OAEPWithSHA-256AndMGF1Padding |
Example: auto, AES/GCM/NoPadding, DES/CBC/PKCS5PaddingDefault value: auto |
---|
Advanced Options |
|
---|
Key | This property is required if no account is selected.It should be a JSON-path expression to be evaluated with input documents or pipeline parameters. The result should be the base64 or PEM-encoded key. Do not copy-and-paste directly to the property.For a sample pipeline using X.509 certificate, refer to the attached pipeline file below:Example: $keyDefault value: None |
---|
Initialization vector | JSON-path expression to be evaluated with input documents or pipeline parameters to be the base64-encoded initialization vector. Leave empty to generate one automatically. Note that the content of the initialization vector should be different for every encryption operation. Reusing IVs will make the encryption operation less secure.Example: $ivDefault value: None |
---|
Encapsulate output | If selected, encrypted fields are JSON-encoded and encapsulated between "ENC:" and ":ENC" strings. When unselected, the field to be encrypted will be replaced with an object with the output of the encryption operation as needed to perform the decryption.Default value: Selected |
---|
| |
---|