@@ -473,18 +473,19 @@ def reidentify_with_fpe(
473
473
def reidentify_with_deterministic (
474
474
project , input_str , surrogate_type = None , key_name = None , wrapped_key = None ,
475
475
):
476
- """Deidentifies sensitive data in a string using deterministic encryption.
476
+ """Re-identifies content that was previously de-identified through deterministic encryption.
477
477
Args:
478
- project: The Google Cloud project id to use as a parent resource.
479
- input_str: The string to deidentify (will be treated as text).
480
- surrogate_type: The name of the surrogate custom info type to used
478
+ project: The Google Cloud project ID to use as a parent resource.
479
+ input_str: The string to be re-identified. Provide the entire token. Example:
480
+ EMAIL_ADDRESS_TOKEN(52):AVAx2eIEnIQP5jbNEr2j9wLOAd5m4kpSBR/0jjjGdAOmryzZbE/q
481
+ surrogate_type: The name of the surrogate custom infoType used
481
482
during the encryption process.
482
- key_name: The name of the Cloud KMS key used to encrypt (' wrap' ) the
483
+ key_name: The name of the Cloud KMS key used to encrypt (" wrap" ) the
483
484
AES-256 key. Example:
484
485
keyName = 'projects/YOUR_GCLOUD_PROJECT/locations/YOUR_LOCATION/
485
486
keyRings/YOUR_KEYRING_NAME/cryptoKeys/YOUR_KEY_NAME'
486
- wrapped_key: The encrypted (' wrapped' ) AES-256 key to use. This key
487
- should be encrypted using the Cloud KMS key specified by key_name.
487
+ wrapped_key: The encrypted (" wrapped" ) AES-256 key previously used to encrypt the content.
488
+ This key must have been encrypted using the Cloud KMS key specified by key_name.
488
489
Returns:
489
490
None; the response from the API is printed to the terminal.
490
491
"""
0 commit comments