Resource: CmekConfig
Configurations used to enable CMEK data encryption with Cloud KMS keys.
JSON representation |
---|
{ "name": string, "kmsKey": string, "kmsKeyVersion": string, "state": enum ( |
Fields | |
---|---|
name |
Required. name of the CmekConfig, of the form |
kms |
Kms key resource name which will be used to encrypt resources |
kms |
Kms key version resource name which will be used to encrypt resources |
state |
Output only. state of the CmekConfig. |
is |
Output only. The default CmekConfig for the Customer. |
last |
Output only. The timestamp of the last key rotation. |
single |
Optional. Single-regional CMEKs that are required for some VAIS features. |
State
States of the CmekConfig.
Enums | |
---|---|
STATE_UNSPECIFIED |
The CmekConfig state is unknown. |
CREATING |
The CmekConfig is creating. |
ACTIVE |
The CmekConfig can be used with DataStores. |
KEY_ISSUE |
The CmekConfig is unavailable, most likely due to the KMS Key being revoked. |
DELETING |
The CmekConfig is deleting. |
UNUSABLE |
The CmekConfig is not usable, most likely due to some internal issue. |
ACTIVE_ROTATING |
The KMS key version is being rotated. |
SingleRegionKey
metadata for single-regional CMEKs.
JSON representation |
---|
{ "kmsKey": string } |
Fields | |
---|---|
kms |
Required. Single-regional kms key resource name which will be used to encrypt resources |
Methods |
|
---|---|
|
Gets the CmekConfig . |
|
Lists all the CmekConfig s with the project. |
|
Provisions a CMEK key for use in a location of a customer's project. |