Class CmekSettings (1.15.1)

Describes the customer-managed encryption key (CMEK) settings associated with a project, folder, organization, billing account, or flexible resource.

Note: CMEK for the Logs Router can currently only be configured for GCP organizations. Once configured, it applies to all projects and folders in the GCP organization.

See Enabling CMEK for Logs Router </logging/docs/routing/managed-encryption>__ for more information.

.. attribute:: name

Output Only. The resource name of the CMEK settings.

Output Only. The service account that will be used by the Logs Router to access your Cloud KMS key. Before enabling CMEK for Logs Router, you must first assign the role roles/cloudkms.cryptoKeyEncrypterDecrypter to the service account that the Logs Router will use to access your Cloud KMS key. Use [GetCmekSettings][google.logging.v2.ConfigServiceV2.G etCmekSettings] to obtain the service account ID. See Enabling CMEK for Logs Router </logging/docs/routing/managed- encryption>__ for more information.

Inheritance

builtins.object > google.protobuf.pyext._message.CMessage > builtins.object > google.protobuf.message.Message > CmekSettings