Method: projects.showEffectiveKeyAccessJustificationsEnrollmentConfig

Full name: projects.showEffectiveKeyAccessJustificationsEnrollmentConfig

Returns the KeyAccessJustificationsEnrollmentConfig of the resource closest to the given project in hierarchy.

HTTP request


The URLs use gRPC Transcoding syntax.

Path parameters

Parameters
project

string

Required. The number or id of the project to get the effective KeyAccessJustificationsEnrollmentConfig for.

Request body

The request body must be empty.

Response body

Response message for KeyAccessJustificationsConfig.ShowEffectiveKeyAccessJustificationsEnrollmentConfig

If successful, the response body contains data with the following structure:

JSON representation 
{
  "hardwareConfig": {
    object (KeyAccessJustificationsEnrollmentConfig)
  },
  "softwareConfig": {
    object (KeyAccessJustificationsEnrollmentConfig)
  },
  "externalConfig": {
    object (KeyAccessJustificationsEnrollmentConfig)
  }
}
Fields
hardwareConfig

object (KeyAccessJustificationsEnrollmentConfig)

The effective KeyAccessJustificationsEnrollmentConfig for hardware keys.
softwareConfig

object (KeyAccessJustificationsEnrollmentConfig)

The effective KeyAccessJustificationsEnrollmentConfig for software keys.
externalConfig

object (KeyAccessJustificationsEnrollmentConfig)

The effective KeyAccessJustificationsEnrollmentConfig for external keys.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/cloudkms
  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

KeyAccessJustificationsEnrollmentConfig

The configuration of a protection level for a project's Key Access Justifications enrollment.

JSON representation 
{
  "auditLogging": boolean,
  "policyEnforcement": boolean
}
Fields
auditLogging

boolean

Whether the project has KAJ logging enabled.
policyEnforcement

boolean

Whether the project is enrolled in KAJ policy enforcement.