Provides interfaces for using Cloud KMS Autokey to provision new
CryptoKeys, ready for Customer Managed
Encryption Key (CMEK) use, on-demand. To support certain client tooling, this
feature is modeled around a KeyHandle
resource: creating a KeyHandle in a resource
project and given location triggers Cloud KMS Autokey to provision a
CryptoKey in the configured key project and
the same location.
Prior to use in a given resource project,
UpdateAutokeyConfig
should have been called on an ancestor folder, setting the key project where
Cloud KMS Autokey should create new
CryptoKeys. See documentation for additional
prerequisites. To check what key project, if any, is currently configured on
a resource project's ancestor folder, see
ShowEffectiveAutokeyConfig.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-11-19 UTC."],[],[]]