samples: add samples for bucket encryption enforcement config

Co-authored-by: nidhiii-27 <224584462+nidhiii-27@users.noreply.github.com>

Author: google-labs-jules[bot]

samples/snippets/encryption_test.py

@@ -144,9 +144,9 @@ def test_bucket_encryption_enforcement_config(capsys):
         storage_get_bucket_encryption_enforcement_config.get_bucket_encryption_enforcement_config(bucket_name)
         out, _ = capsys.readouterr()
         assert f"Encryption Enforcement Config for bucket {bucket_name}:" in out
-        assert "Customer-managed encryption enforcement config restriction mode: NOT_RESTRICTED" in out
-        assert "Customer-supplied encryption enforcement config restriction mode: FULLY_RESTRICTED" in out
-        assert "Google-managed encryption enforcement config restriction mode: FULLY_RESTRICTED" in out
+        assert "Customer-managed encryption enforcement config restriction mode: NotRestricted" in out
+        assert "Customer-supplied encryption enforcement config restriction mode: FullyRestricted" in out
+        assert "Google-managed encryption enforcement config restriction mode: FullyRestricted" in out
 
         # Update
         storage_update_encryption_enforcement_config.update_encryption_enforcement_config(bucket_name)
@@ -156,9 +156,9 @@ def test_bucket_encryption_enforcement_config(capsys):
         # Get after update
         storage_get_bucket_encryption_enforcement_config.get_bucket_encryption_enforcement_config(bucket_name)
         out, _ = capsys.readouterr()
-        assert "Customer-managed encryption enforcement config restriction mode: NOT_RESTRICTED" in out
+        assert "Customer-managed encryption enforcement config restriction mode: NotRestricted" in out
         assert "Customer-supplied encryption enforcement config restriction mode: None" in out
-        assert "Google-managed encryption enforcement config restriction mode: FULLY_RESTRICTED" in out
+        assert "Google-managed encryption enforcement config restriction mode: FullyRestricted" in out
 
     finally:
         try:

samples/snippets/storage_get_bucket_encryption_enforcement_config.py

@@ -12,10 +12,10 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+# [START storage_get_bucket_encryption_enforcement_config]
 from google.cloud import storage
 
 
-# [START storage_get_bucket_encryption_enforcement_config]
 def get_bucket_encryption_enforcement_config(bucket_name):
     """Gets the bucket encryption enforcement configuration."""
     # The ID of your GCS bucket

samples/snippets/storage_set_bucket_encryption_enforcement_config.py

@@ -12,11 +12,11 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+# [START storage_set_bucket_encryption_enforcement_config]
 from google.cloud import storage
 from google.cloud.storage.bucket import EncryptionEnforcementConfig
 
 
-# [START storage_set_bucket_encryption_enforcement_config]
 def set_bucket_encryption_enforcement_config(bucket_name):
     """Creates a bucket with encryption enforcement configuration."""
     # The ID of your GCS bucket
@@ -25,10 +25,10 @@ def set_bucket_encryption_enforcement_config(bucket_name):
     storage_client = storage.Client()
     bucket = storage_client.bucket(bucket_name)
 
-    # Restriction mode can be "FULLY_RESTRICTED" or "NOT_RESTRICTED"
-    bucket.customer_managed_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="NOT_RESTRICTED")
-    bucket.customer_supplied_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="FULLY_RESTRICTED")
-    bucket.google_managed_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="FULLY_RESTRICTED")
+    # Restriction mode can be "FullyRestricted" or "NotRestricted"
+    bucket.customer_managed_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="NotRestricted")
+    bucket.customer_supplied_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="FullyRestricted")
+    bucket.google_managed_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="FullyRestricted")
 
     bucket.create()
 

samples/snippets/storage_update_encryption_enforcement_config.py

@@ -12,11 +12,11 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+# [START storage_update_encryption_enforcement_config]
 from google.cloud import storage
 from google.cloud.storage.bucket import EncryptionEnforcementConfig
 
 
-# [START storage_update_encryption_enforcement_config]
 def update_encryption_enforcement_config(bucket_name):
     """Updates the encryption enforcement policy for a bucket."""
     # The ID of your GCS bucket
@@ -25,9 +25,9 @@ def update_encryption_enforcement_config(bucket_name):
     storage_client = storage.Client()
     bucket = storage_client.get_bucket(bucket_name)
 
-    # 1. Update a specific type (e.g., change GMEK to FULLY_RESTRICTED)
-    bucket.google_managed_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="FULLY_RESTRICTED")
-    bucket.customer_managed_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="NOT_RESTRICTED")
+    # 1. Update a specific type (e.g., change GMEK to FullyRestricted)
+    bucket.google_managed_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="FullyRestricted")
+    bucket.customer_managed_encryption_enforcement_config = EncryptionEnforcementConfig(restriction_mode="NotRestricted")
 
     # 2. Remove a specific type (e.g., remove CSEK enforcement)
     bucket.customer_supplied_encryption_enforcement_config = None