(mongodb >=1.7.0)
MongoDB\Driver\Manager::createClientEncryption — Create a new ClientEncryption object
$options
) : MongoDB\Driver\ClientEncryptionConstructs a new MongoDB\Driver\ClientEncryption object with the specified options.
options
| Option | Type | Description |
|---|---|---|
| keyVaultClient | MongoDB\Driver\Manager | The Manager used to route data key queries to a separate MongoDB cluster. By default, the current Manager and cluster is used. |
| keyVaultNamespace | string | A fully qualified namespace (e.g. "databaseName.collectionName") denoting the collection that contains all data keys used for encryption and decryption. |
| kmsProviders | array |
A document containing the configuration for one or more KMS providers, which are used to encrypt data keys. Currently aws or localare supported and at least one must be specified. The format for aws is as follows: aws: {
accessKeyId: <string>,
secretAccessKey: <string>
}
The format for local is as follows: local: {
// The master key used to encrypt/decrypt data keys
key: <96-byte MongoDB\BSON\Binary with subtype 0>
}
|
Returns a new MongoDB\Driver\ClientEncryption instance.