Describes the customer-managed encryption key (CMEK) settings associated with a project, folder, organization, billing account, or flexible resource.
Note: CMEK for the Logs Router can currently only be configured for GCP organizations. Once configured, it applies to all projects and folders in the GCP organization.
See Enabling CMEK for Logs Router for more information.
JSON representation | |
---|---|
{ "name": string, "kmsKeyName": string, "serviceAccountId": string } |
Fields | |
---|---|
name |
Output only. The resource name of the CMEK settings. |
kmsKeyName |
The resource name for the configured Cloud KMS key. KMS key name format: "projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]" For example: To enable CMEK for the Logs Router, set this field to a valid The Cloud KMS key used by the Log Router can be updated by changing the To disable CMEK for the Logs Router, set this field to an empty string. See Enabling CMEK for Logs Router for more information. |
serviceAccountId |
Output only. The service account that will be used by the Logs Router to access your Cloud KMS key. Before enabling CMEK for Logs Router, you must first assign the role See Enabling CMEK for Logs Router for more information. |