Provisions a CMEK key for use in a location of a customer's project. This method will also conduct location validation on the provided cmekConfig to make sure the key is valid and can be used in the selected location.
Required. The name of the CmekConfig of the form projects/{project}/locations/{location}/cmekConfig or projects/{project}/locations/{location}/cmekConfigs/{cmekConfig}.
Query parameters
Parameters
setDefault
boolean
Set the following CmekConfig as the default to be used for child resources if one is not specified.
Request body
The request body contains an instance of CmekConfig.
Response body
If successful, the response body contains an instance of Operation.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-27 UTC."],[[["\u003cp\u003eThis document describes how to update a Customer-Managed Encryption Key (CMEK) configuration for a specific project location.\u003c/p\u003e\n"],["\u003cp\u003eThe request is made via a \u003ccode\u003ePATCH\u003c/code\u003e HTTP method to a specific URL using gRPC Transcoding syntax and requires a \u003ccode\u003econfig.name\u003c/code\u003e path parameter that represents the CMEK configuration.\u003c/p\u003e\n"],["\u003cp\u003eThe request can set the updated CMEKConfig as default via a \u003ccode\u003esetDefault\u003c/code\u003e query parameter.\u003c/p\u003e\n"],["\u003cp\u003eThe request body includes details for updating the \u003ccode\u003eCmekConfig\u003c/code\u003e, and a successful request returns an \u003ccode\u003eOperation\u003c/code\u003e instance.\u003c/p\u003e\n"],["\u003cp\u003eUpdating a CMEK configuration requires the OAuth scope \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e and the IAM permission \u003ccode\u003ediscoveryengine.cmekConfigs.update\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,[]]