Generate an envelope data key
Vault
Generate an envelope data key
Returns a fresh random 32-byte data-encryption key (DEK) plus its KEK-wrapped form. Use the raw DEK locally to encrypt many records, persist the wrapped DEK alongside the ciphertext, and call /unwrap to recover the DEK later. Requires scope: vault:write
POST
Generate an envelope data key
Authorizations
Voyant Cloud API token, passed as Authorization: Bearer <token>. Each token carries a fixed set of scopes; an operation rejects tokens missing its required scope.
Path Parameters
Pattern:
^[a-z0-9-]+$Response
Generated data key