afv-library/skills/platform-data-and-tooling-api-context-get/assets/enterprise_api/ExternalEncryptionRootKey.json

{
  "sections": [
    "title",
    "description",
    "fields",
    "special_access_rules",
    "usage",
    "wsdl_segment",
    "field_reference"
  ],
  "title": "ExternalEncryptionRootKey - Data API",
  "description": "Represents metadata about root keys stored in third-party key stores that are used to generate and secure keys that encrypt Salesforce data. This object is available in API version 58.0 and later.",
  "fields_columns": [
    "type",
    "properties",
    "description"
  ],
  "fields": {
    "ActivatedDate": {
      "type": "dateTime",
      "properties": "Filter, Nillable, Sort, Update",
      "description": "The date the key was activated in Salesforce."
    },
    "CreatedBy": {
      "type": "string",
      "properties": "Filter, Group, Nillable, Sort, Update",
      "description": "The email address of the user who created the root key. For example, user@example.com."
    },
    "Description": {
      "type": "string",
      "properties": "Filter, Group, Nillable, Sort, Update",
      "description": "The user-defined description of the root key."
    },
    "LastModifiedBy": {
      "type": "string",
      "properties": "Filter, Group, Nillable, Sort, Update",
      "description": "The email address of the user who most recently modified the key. For example, user@example.com."
    },
    "Region": {
      "type": "string",
      "properties": "Filter, Group, Nillable, Sort, Update",
      "description": "The region for the customer managed key. For example, if the RootKeyService is AWS, the region is an Amazon Web Services (AWS) region such as us-east1."
    },
    "RootKeyIdentifier": {
      "type": "string",
      "properties": "Filter, Nillable, Sort, Update",
      "description": "The unique key identifier from the external KMS, such as an AWS Amazon Resource Name (ARN). For example, arn:aws:kms:us-west-2:123456789000:key/123ab456-7cd8-9012-3e4f-5gh678i901j2"
    },
    "RootKeyService": {
      "type": "string",
      "properties": "Filter, Group, Nillable, Sort, Update",
      "description": "The external key management service connected to Salesforce. For example, AWS."
    },
    "Status": {
      "type": "string",
      "properties": "Filter, Group, Nillable, Sort, Update",
      "description": "The status of the key. This is the only value that can be changed using update(). You can only change the status from Active to Inactive, or from Inactive to Active. Possible values are: Activation Pending—Salesforce is waiting for confirmation of a valid key policy in the external key store. Active—Can be used to encrypt new DEKs and decrypt existing DEKs. Archived—Can’t encrypt new DEKs. Can be used to decrypt previously created DEKs. Canceled—Root key activation canceled by a user. Inactive—The root key, and the DEKs that it encrypts, are inaccessible. Inaccessible DEKs can’t be used to decrypt data, which renders that data also inaccessible. Unavailable—The root key, and the DEKs that it encrypts, cannot be accessed. The root key has been removed or deactivated by the managing KMS."
    }
  },
  "special_access_rules": "This object is available as part of the Shield and Salesforce Platform Encryption add-on subscriptions. Access to this object also requires the Cache-Only Key Service add-on subscription.\n\nThis object is available as part of the Shield and\n         Salesforce Platform Encryption add-on subscriptions. Access to this object also requires\n         the Cache-Only Key Service add-on subscription.",
  "usage": "Three functions are available: describeSObjects(),query(), and update() Use your preferred developer environment to run the examples. Use the Salesforce developer Introduction to REST API for basic information on making REST calls into Salesforce. Also, Introducing the Salesforce Shield Platform Encryption REST API gives you starter information on using REST to work with Shield Platform Encryption. To get information about the ExternalEncryptionRootKey sObject, use describe. On success, the response is the full JSON description of the ExternalEncryptionRootKey sObject. To get information about a specific root key, use query on the ExternalEncryptionRootKey sObject. Use the Identifier value as listed on the Key Management Page for the root key Id in the WHERE clause. On success, the response is be similar to To update the status of an ExternalEncryptionRootKey from Active to Inactive, or from Inactive to Active, use PATCH on the specific key object. Use the vaule for Identifier as listed on the Key Management Page for the root key identifier. On success, the response is be similar to I SEE NO RESPONSE.\n\nThree functions are available: describeSObjects(),query(), and update()\n\nUse your preferred developer environment to run the examples. Use the Salesforce developer Introduction to REST API for basic information on making REST calls into Salesforce. Also, Introducing the Salesforce Shield Platform Encryption REST API gives you starter information on using REST to work with Shield Platform Encryption.\n\nTo get information about the ExternalEncryptionRootKey sObject, use describe.\n\nOn success, the response is the full JSON description of the ExternalEncryptionRootKey sObject.\n\nTo get information about a specific root key, use query on the ExternalEncryptionRootKey sObject. Use the Identifier value as listed on the Key Management Page for the root key Id in the WHERE clause.\n\nOn success, the response is be similar to\n\nTo update the status of an ExternalEncryptionRootKey from Active to Inactive, or from Inactive to Active, use PATCH on the specific key object. Use the vaule for Identifier as listed on the Key Management Page for the root key identifier.\n\nOn success, the response is be similar to I SEE NO RESPONSE.\n\n- **Describe an external root key with describeSObjects()**: To get information about the ExternalEncryptionRootKey sObject, use describe. curl --location 'https://DOMAIN.my.salesforce.com/services/data/v62.0/sobjects/'\\ ExternalEncryptionRootKey/describe' --header 'Content-Type: application/json' \\ --header 'Authorization: Bearer TOKEN'` On success, the response is the full JSON description of the ExternalEncryptionRootKey sObject.\n- **Get info on an external root key with query()**: To get information about a specific root key, use query on the ExternalEncryptionRootKey sObject. Use the Identifier value as listed on the Key Management Page for the root key Id in the WHERE clause. curl --location 'https://DOMAIN.my.salesforce.com/services/data/v62.0/query?' \\ ?q=SELECT+FIELDS(ALL)+FROM+ExternalEncryptionRootKey+WHERE+Id='48q001t5ddzbucnAAA'+\\ --header 'Content-Type: application/json' \\ --header 'Authorization: Bearer TOKEN'` On success, the response is be similar to { \"totalSize\": 1, \"done\": true, \"records\": [ { \"attributes\": { \"type\": \"ExternalEncryptionRootKey\", \"url\": \"/services/data/v62.0/sobjects/ExternalEncryptionRootKey/48q001t5ddzbucnAAA\" }, \"Id\": \"48q001t5ddzbucnAAA\", \"RootKeyIdentifier\": \"97ee8238-c5ac-4320-a2d0-a728aaefd567\", \"CreatedDate\": \"2024-08-05T17:32:11.841+0000\", \"CreatedBy\": \"charley.t.pulasky@wise-raccoon-od1ly6.com\", \"LastModifiedDate\": \"2025-02-12T18:36:11.063+0000\", \"LastModifiedBy\": \"charley.t.pulasky@wise-raccoon-od1ly6.com\", \"RootKeyService\": \"SF\", \"Region\": \"KEY REGION\", \"Status\": \"Active\", \"Description\": null, \"ActivatedDate\": null } ] }`\n- **Update Status on an external root key with update()**: To update the status of an ExternalEncryptionRootKey from Active to Inactive, or from Inactive to Active, use PATCH on the specific key object. Use the vaule for Identifier as listed on the Key Management Page for the root key identifier. curl --location --request PATCH 'https://DOMAIN.my.salesforce.com/services/data/v62.0/sobjects/ExternalEncryptionRootKey/ROOTKEYIDENTIFIER' \\ --header 'Content-Type: application/json' \\ --header 'Authorization: Bearer TOKEN'\\ --data '{ \"Status\": \"Active\" }'` On success, the response is be similar to I SEE NO RESPONSE.",
  "wsdl_segment": "```xml\n<complexType name=\"ExternalEncryptionRootKey\">\n  <complexContent>\n    <extension base=\"ens:sObject\">\n      <sequence>\n        <element name=\"ActivatedDate\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:dateTime\"/>\n        <element name=\"CreatedBy\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:string\"/>\n        <element name=\"CreatedDate\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:dateTime\"/>\n        <element name=\"Description\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:string\"/>\n        <element name=\"LastModifiedBy\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:string\"/>\n        <element name=\"LastModifiedDate\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:dateTime\"/>\n        <element name=\"Region\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:string\"/>\n        <element name=\"RootKeyIdentifier\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:string\"/>\n        <element name=\"RootKeyService\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:string\"/>\n        <element name=\"Status\" nillable=\"true\" minOccurs=\"0\" type=\"xsd:string\"/>\n      </sequence>\n    </extension>\n  </complexContent>\n</complexType>\n```",
  "field_reference": {
    "ActivatedDate": {
      "field_label": "Activated Date",
      "type": "datetime"
    },
    "CreatedBy": {
      "field_label": "Created By",
      "type": "string",
      "length": "64"
    },
    "CreatedDate": {
      "field_label": "Created Date",
      "type": "datetime"
    },
    "Description": {
      "field_label": "Description",
      "type": "string",
      "length": "100"
    },
    "Id": {
      "field_label": "External Root Key Id",
      "type": "id",
      "length": "18"
    },
    "LastModifiedBy": {
      "field_label": "Last Modified By",
      "type": "string",
      "length": "64"
    },
    "LastModifiedDate": {
      "field_label": "Last Modified Date",
      "type": "datetime"
    },
    "Region": {
      "field_label": "Region",
      "type": "string",
      "length": "150"
    },
    "RootKeyIdentifier": {
      "field_label": "Root Key Identifier",
      "type": "string",
      "length": "512"
    },
    "RootKeyService": {
      "field_label": "Root Key Service",
      "type": "string",
      "length": "32"
    },
    "Status": {
      "field_label": "Status",
      "type": "string",
      "length": "32"
    }
  },
  "field_reference_columns": [
    "field_label",
    "type",
    "length"
  ]
}