Help Center/ GaussDB/ Developer Guide(Distributed_V2.0-8.x)/ SQL Reference/ SQL Syntax/ D/ DROP COLUMN ENCRYPTION KEY
Updated on 2025-08-19 GMT+08:00
View PDF

DROP COLUMN ENCRYPTION KEY

Description

Deletes a column encryption key (CEK).

Precautions

Only the CEK owner or a user who has been granted the DROP permission can run this command. System administrators have this permission by default.

Syntax

1
 
DROP COLUMN ENCRYPTION KEY [ IF EXISTS ] client_column_key_name [, ...] [ CASCADE | RESTRICT ];

Parameters

  • IF EXISTS

    If a specified CEK does not exist, a notice rather than an error is issued.

  • client_column_key_name

    Name of a CEK to be deleted.

    Value range: a string. It is the name of an existing CEK.

  • CASCADE |RESTRICT

    For fully-encrypted databases, this syntax is high-risk operation. Actually, encrypted columns that depend on CEKs cannot be deleted.

Helpful Links

ALTER COLUMN ENCRYPTION KEY and CREATE COLUMN ENCRYPTION KEY

Parent topic: D