Method: projects.locations.updateCmekConfig

Creates or Updates a CMEK config.

Updates the Customer Managed Encryption Key assotiated with the Cloud Tasks location (Creates if the key does not already exist). All new tasks created in the location will be encrypted at-rest with the KMS-key provided in the config.

HTTP request


The URL uses gRPC Transcoding syntax.

Path parameters



Output only. The config resource name which includes the project and location and must end in 'cmekConfig', in the format projects/PROJECT_ID/locations/LOCATION_ID/cmekConfig`

Query parameters


string (FieldMask format)

List of fields to be updated in this request.

This is a comma-separated list of fully qualified names of fields. Example: "user.displayName,photo".

Request body

The request body contains an instance of CmekConfig.

Response body

If successful, the response body contains an instance of CmekConfig.

Authorization scopes

Requires one of the following OAuth scopes:


For more information, see the Authentication Overview.