Describes the customer-managed encryption key (CMEK)
settings associated with a project, folder, organization, billing
account, or flexible resource.
Note: CMEK for the Logs Router can currently only be configured for GCP
organizations. Once configured, it applies to all projects and folders
in the GCP organization.
See Enabling CMEK for Logs
Router </logging/docs/routing/managed-encryption>__ for more
information.
.. attribute:: name
Output Only. The resource name of the CMEK settings.
Output Only. The service account that will be used by the Logs
Router to access your Cloud KMS key. Before enabling CMEK for
Logs Router, you must first assign the role
roles/cloudkms.cryptoKeyEncrypterDecrypter to the service
account that the Logs Router will use to access your Cloud KMS
key. Use [GetCmekSettings][google.logging.v2.ConfigServiceV2.G
etCmekSettings] to obtain the service account ID. See
Enabling CMEK for Logs Router </logging/docs/routing/managed-
encryption>__ for more information.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-01-08 UTC."],[],[]]