Getting a Cloud KMS resource ID

When you refer to a Cloud Key Management Service resource using the Cloud Key Management Service API or Google Cloud CLI, such as when you grant an Identity and Access Management (IAM) role on the resource, you refer to the resource by its ID. This topic shows how to get the ID for a key ring, a key, and a key version.

Getting the resource ID for a key ring

Console

  1. Go to the Key Management page in the Google Cloud console.

    Go to the Key Management page

  2. Click More for the key ring.

  3. Click Copy resource name. The resource ID for the key ring is copied to your clipboard.

gcloud

List all key rings in a location:

gcloud kms keyrings list --location location

The Name column of the output includes the resource ID for each key ring. For example:

projects/example-project-98765/locations/us-central1/keyRings/example-ring

Getting the ID for a key and version

Console

  1. Go to the Key Management page in the Google Cloud console.

    Go to the Key Management page

  2. Select the key ring that contains the key.

  3. For the key whose resource ID you are retrieving, click More .

  4. Click Copy resource name. The resource ID for the key is copied to your clipboard. Its format is similar to the following:

    projects/example-project-98765/locations/us-central1/keyRings/example-ring/cryptoKeys/example-key

  5. A key contains zero or more key versions. A key version's ID is the key ID, plus a version ID. To list all versions for a key, click the key's name. Click the More icon for the version, and click Copy resource name.

gcloud

List all keys on a given key ring:

gcloud kms keys list --keyring keyring --location location

The Name column of the output includes the resource ID for each key. For example:

projects/example-project-98765/locations/us-central1/keyRings/example-ring/cryptoKeys/example-key

A key has zero or more key versions. A key version's ID is the key ID, plus a slash (/) character, and the version ID. To list all versions for a key:

gcloud kms keys versions list --location us-central1 --keyring blah --key foo_import_key

The Name column of the output includes the resource ID for each key version. For example:

projects/example-project-98765/locations/us-central1/keyRings/example-ring/cryptoKeys/example-key/2

What's next