Get encryption configuration usage

Returns wrapped-DEK counts for customer-visible configurations. Old keys must remain accessible while referenced. This does not count legacy non-envelope ciphertext.

Required permission

Account > Admin > Encryption > Read

Response body

{object}
Response object.

data
{object} required
Result data.

usage
{object} required
Wrapped-DEK counts by configuration ID. Non-zero counts require retaining access to the old key; zero is not proof that legacy encrypted data is unused.

API

CLI

JS Client

GET /v1/encryption/usage

GET /v1/teams/{teamId}/encryption/usage

Example response

200 OK

Wrapped-DEK counts by configuration ID.

JSON