[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間:2025-09-04 (世界標準時間)。"],[[["\u003cp\u003eKey Access Justifications validates each request to access keys in an external key manager.\u003c/p\u003e\n"],["\u003cp\u003eRequests are approved or denied based on the provided justification.\u003c/p\u003e\n"],["\u003cp\u003eIt enhances visibility into encryption key requests, especially when integrated with Cloud External Key Manager.\u003c/p\u003e\n"],["\u003cp\u003eThis tool specifically focuses on allowing visibility into keys that change state from at rest to in use.\u003c/p\u003e\n"]]],[],null,["# Introduction to Key Access Justifications\n=========================================\n\nKey Access Justifications provides a justification for every request to access keys stored in\nan external key manager. It lets you approve or deny the access request based on\nthe provided justification. Using Key Access Justifications with [Cloud External Key Manager](/kms/docs/ekm)\nprovides visibility into requests for encryption keys that allows data to\nchange state from at-rest to in-use.\n\nFor more information, see [Overview of Key Access Justifications](/assured-workloads/key-access-justifications/docs/overview)."]]