Required. Location name of the key ring, e.g. "us-west1".
kmsRing
string
Required. A key ring organizes keys in a specific Google Cloud location and allows you to manage access control on groups of keys. A key ring's name does not need to be unique across a Google Cloud project, but must be unique within a given location.
key
string
Required. A Cloud KMS key is a named object containing one or more key versions, along with metadata for the key. A key exists on exactly one key ring tied to a specific location.
keyVersion
string
Optional. Each version of a key contains key material used for encryption or signing. A key's version is represented by an integer, starting at 1. To decrypt data or verify a signature, you must use the same key version that was used to encrypt or sign the data.
kmsProjectId
string
Optional. The gcp project id of the project where the kms key stored. If empty, the kms key is stored at the same project as customer's project and ecrypted with CMEK, otherwise, the kms key is stored in the tenant project and encrypted with GMEK
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-22 UTC."],[[["\u003cp\u003eThis product or feature is subject to the "Pre-GA Offerings Terms" and is available "as is" with potentially limited support, as detailed in the Service Specific Terms and launch stage descriptions.\u003c/p\u003e\n"],["\u003cp\u003eConfiguration for Cloud KMS information is provided in JSON format, including fields for \u003ccode\u003ekmsLocation\u003c/code\u003e, \u003ccode\u003ekmsRing\u003c/code\u003e, \u003ccode\u003ekey\u003c/code\u003e, and \u003ccode\u003ekeyVersion\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003ekmsLocation\u003c/code\u003e field specifies the required location name of the key ring, such as "us-west1".\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003ekmsRing\u003c/code\u003e field represents a key ring that organizes keys within a Google Cloud location, and its name must be unique within that specific location.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003ekeyVersion\u003c/code\u003e field is optional and represents a specific version of the key that contains the material used for encryption or signing operations.\u003c/p\u003e\n"]]],[],null,[]]