A Cloud KMS key configuration that a CertificateAuthority will use.
This message has
oneof_ fields (mutually exclusive fields).
For each oneof, at most one member field can be set at the same time.
Setting any member of the oneof automatically clears all other
Required. The resource name for an existing Cloud KMS CryptoKeyVersion in the format ``projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*``. This option enables full flexibility in the key's capabilities and properties. This field is a member of `oneof`_ ``KeyVersion``.
Required. The algorithm to use for creating a managed Cloud KMS key for a for a simplified experience. All managed keys will be have their ProtectionLevel as ``HSM``. This field is a member of `oneof`_ ``KeyVersion``.