Migrating from an Old KACLS to a New KACLS

Use the POST /v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/rewrap API to migrate from an old KACLS (KACLS1) to a new KACLS (KACLS2). It takes a DEK wrapped with KACLS1’s wrap API and returns a DEK wrapped with KACLS2’s wrap API.

Request Parameters

Example Request

{
    original_kacls_url: <Old Endpoint URL>,
    authorization: <Authz-JWT>,
    reason: "",
    wrapped_key: "eyJ3cmFwcGVkX2tleSI6IkozSnZCTEdVOFlWeWlocGpsWXpyd..."
}

Example Response

{
    wrapped_key: "eyJ3cmFwcGVkX2tleSI6IkozSnZCTEdVOFlWeWlocGpsWXpyd...",
    resource_key_hash: "SXOyPekBAUI95zuZSuJzsBlK4nO5SuJK4nNCPem5SuI="
}

Response Codes

Refer to HTTP status codes for details.