AutokeyConfig

Cloud KMS Autokey configuration for a folder.

JSON representation
{
  "name": string,
  "keyProject": string,
  "state": enum (State)
}
Fields
name

string

Identifier. Name of the AutokeyConfig resource, e.g. folders/{FOLDER_NUMBER}/autokeyConfig.

keyProject

string

Optional. Name of the key project, e.g. projects/{PROJECT_ID} or projects/{PROJECT_NUMBER}, where Cloud KMS Autokey will provision a new CryptoKey when a KeyHandle is created. On folders.updateAutokeyConfig, the caller will require cloudkms.cryptoKeys.setIamPolicy permission on this key project. Once configured, for Cloud KMS Autokey to function properly, this key project must have the Cloud KMS API activated and the Cloud KMS Service Agent for this key project must be granted the cloudkms.admin role (or pertinent permissions). A request with an empty key project field will clear the configuration.

state

enum (State)

Output only. The state for the AutokeyConfig.

State

The states AutokeyConfig can be in.

Enums
STATE_UNSPECIFIED The state of the AutokeyConfig is unspecified.
ACTIVE The AutokeyConfig is currently active.
KEY_PROJECT_DELETED A previously configured key project has been deleted and the current AutokeyConfig is unusable.
UNINITIALIZED The AutokeyConfig is not yet initialized or has been reset to its default uninitialized state.