[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-09-05 (世界標準時間)。"],[[["\u003cp\u003eKey Access Justifications validates each request for accessing keys in an external key manager.\u003c/p\u003e\n"],["\u003cp\u003eRequests are approved or denied based on the provided justification.\u003c/p\u003e\n"],["\u003cp\u003eUsing Key Access Justifications with Cloud External Key Manager provides insights into requests for encryption keys.\u003c/p\u003e\n"],["\u003cp\u003eKey Access Justifications offers the ability to review requests for keys used in transitioning data from an at-rest to in-use state.\u003c/p\u003e\n"]]],[],null,["# Introduction to Key Access Justifications\n=========================================\n\nKey Access Justifications provides a justification for every request to access keys stored in\nan external key manager. It lets you approve or deny the access request based on\nthe provided justification. Using Key Access Justifications with [Cloud External Key Manager](/kms/docs/ekm)\nprovides visibility into requests for encryption keys that allows data to\nchange state from at-rest to in-use.\n\nFor more information, see [Overview of Key Access Justifications](/assured-workloads/key-access-justifications/docs/overview).\n\nTo learn about the core principles behind Google Cloud's administrative access\ncontrols, see [Overview of administrative access controls](/assured-workloads/cloud-provider-access-management/docs/administrative-access)."]]
