Tenant Encryption

API reference

Tenant Encryption

APIs to enable per-tenant encryption (PTE) for a company.

Operations

Create or rotate tenant CMK

Request

First call provisions a Spotnana-managed CMK and DEK. Subsequent calls rotate the CMK and re-wrap the existing DEK. Returns 429 if called within the one-hour cooldown window. Requires the COMPANY_MANAGEMENT WRITE permission on the company.

Security

Bearer

Path

companyIdstring, (uuid)required

Tenant (company) identifier

Example:4974a66b-7493-4f41-908c-58ba81093947

curl -i -X POST \
  https://api-ext-sboxmeta.partners.spotnana.com/v3/tenant-encryption/4974a66b-7493-4f41-908c-58ba81093947/key \
  -H 'Authorization: Bearer <YOUR_TOKEN_HERE>'

Responses

Key provisioned or rotated

Bodyapplication/json

configIdstring, (uuid)

Example:"4974a66b-7493-4f41-908c-58ba81093947"

createdboolean

True on first provision; false on CMK rotation.

Example:true

Response

{
  "configId": "4974a66b-7493-4f41-908c-58ba81093947",
  "created": true
}