Provisions a CMEK key for use in a location of a customer's project. This method will also conduct location validation on the provided cmekConfig to make sure the key is valid and can be used in the selected location.
Required. The name of the CmekConfig of the form projects/{project}/locations/{location}/cmekConfig or projects/{project}/locations/{location}/cmekConfigs/{cmekConfig}.
Query parameters
Parameters
setDefault
boolean
Set the following CmekConfig as the default to be used for child resources if one is not specified.
Request body
The request body contains an instance of CmekConfig.
Response body
If successful, the response body contains an instance of Operation.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-27 UTC."],[[["\u003cp\u003eThis page details how to update a Customer-Managed Encryption Key (CMEK) configuration for a specific location within a project.\u003c/p\u003e\n"],["\u003cp\u003eThe process uses a PATCH HTTP request to the specified endpoint, requiring a \u003ccode\u003econfig.name\u003c/code\u003e path parameter to identify the CMEK configuration.\u003c/p\u003e\n"],["\u003cp\u003eYou can optionally set the updated CMEK configuration as the default for child resources using the \u003ccode\u003esetDefault\u003c/code\u003e query parameter.\u003c/p\u003e\n"],["\u003cp\u003eThe request body should include the updated \u003ccode\u003eCmekConfig\u003c/code\u003e, and a successful response will return an \u003ccode\u003eOperation\u003c/code\u003e instance.\u003c/p\u003e\n"],["\u003cp\u003eUpdating CMEK configurations requires OAuth scope \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e and the \u003ccode\u003ediscoveryengine.cmekConfigs.update\u003c/code\u003e IAM permission.\u003c/p\u003e\n"]]],[],null,["# Method: projects.locations.updateCmekConfig\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Query parameters](#body.QUERY_PARAMETERS)\n- [Request body](#body.request_body)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [IAM Permissions](#body.aspect_1)\n\nProvisions a CMEK key for use in a location of a customer's project. This method will also conduct location validation on the provided cmekConfig to make sure the key is valid and can be used in the selected location.\n\n### HTTP request\n\n`PATCH https://discoveryengine.googleapis.com/v1beta/{config.name=projects/*/locations/*/cmekConfig}`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Path parameters\n\n### Query parameters\n\n### Request body\n\nThe request body contains an instance of [CmekConfig](/generative-ai-app-builder/docs/reference/rest/v1beta/projects.locations.cmekConfigs#CmekConfig).\n\n### Response body\n\nIf successful, the response body contains an instance of [Operation](/generative-ai-app-builder/docs/reference/rest/Shared.Types/ListOperationsResponse#Operation).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp).\n\n### IAM Permissions\n\nRequires the following [IAM](https://cloud.google.com/iam/docs) permission on the `name` resource:\n\n- `discoveryengine.cmekConfigs.update`\n\nFor more information, see the [IAM documentation](https://cloud.google.com/iam/docs)."]]
