v1

latestOpenAPI 3.1.02026-08-0662251219.8 KB

Tenant Encryption

Create or rotate tenant CMK

First call provisions a Spotnana-managed CMK and DEK. Subsequent calls rotate the CMK and re-wrap the existing DEK. Returns 429 if called within the one-hour cooldown window. Requires the COMPANY_MANAGEMENT WRITE permission on the company.

post/v3/tenant-encryption/{companyId}/key

Response

Key provisioned or rotated

configIdstring uuid

createdboolean

True on first provision; false on CMK rotation.

Example response

{
  "configId": "4974a66b-7493-4f41-908c-58ba81093947",
  "created": true
}