Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Halaman ini memberikan petunjuk tentang cara mengedit atau menghapus kebijakan kunci enkripsi yang dikelola pelanggan (CMEK).
Mengedit kebijakan CMEK
Anda dapat mengubah label dan deskripsi kebijakan CMEK, tetapi Anda tidak dapat
menentukan kunci lain yang akan digunakan. Untuk menentukan kunci yang berbeda, Anda perlu
memperbarui kebijakan CMEK, yang hanya berfungsi jika belum digunakan oleh
kumpulan penyimpanan.
Gunakan petunjuk berikut untuk mengedit kebijakan CMEK menggunakan konsol Google Cloud
atau Google Cloud CLI.
Konsol
Gunakan petunjuk berikut untuk mengedit kebijakan CMEK di konsol Google Cloud .
Anda hanya dapat mengubah deskripsi kebijakan CMEK dan labelnya.
Buka halaman NetApp Volumes di konsol Google Cloud .
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-09-04 UTC."],[],[],null,["# Manage CMEK policies\n\nThis page provides instructions on how to edit or delete a customer-managed\nencryption key (CMEK) policy.\n\nEdit a CMEK policy\n------------------\n\nYou can change the labels and description of a CMEK policy, but you cannot\nspecify a different key to be used. To specify a different key, you need to\nupdate the CMEK policy, which only works if it isn't already being used by a\nstorage pool.\n\nUse the following instructions to edit a CMEK policy using the Google Cloud console\nor Google Cloud CLI. \n\n### Console\n\nUse the following instructions to edit a CMEK policy in the Google Cloud console.\nYou can only change a CMEK policy description and its labels.\n\n1. Go to the **NetApp Volumes** page in the Google Cloud console.\n\n [Go to NetApp Volumes](https://console.cloud.google.com/netapp/volumes)\n2. Select **CMEK policies**.\n\n3. Find the CMEK policy you want to edit and click **Show more**.\n\n4. Select **Edit**.\n\n5. Optional: Change the description in the **Description** field.\n\n6. Optional: Add, modify, or delete labels.\n\n### gcloud\n\nRun the following command to edit a CMEK policy in Google Cloud CLI: \n\n```json\ngcloud netapp kms-configs update CONFIG_NAME \\\n --project=\u003cvar label=\"project ID\" translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e \\\n --location=\u003cvar label=\"location\" translate=\"no\"\u003eLOCATION\u003c/var\u003e \\\n --description=\u003cvar label=\"description\" translate=\"no\"\u003eDESCRIPTION\u003c/var\u003e \\\n --labels=\u003cvar label=\"labels\" translate=\"no\"\u003eLABELS\u003c/var\u003e \\\n```\n\nFor more options, see [Google Cloud SDK documentation for Cloud Key Management Service](/sdk/gcloud/reference/netapp/kms-configs).\n\nDelete a CMEK policy\n--------------------\n\nYou can delete a CMEK policy if the policy is unused by any storage pools. \n\n### Console\n\nUse the following instructions to delete a CMEK policy using the\nGoogle Cloud console:\n\n1. Go to the **NetApp Volumes** page in the Google Cloud console.\n\n [Go to NetApp Volumes](https://console.cloud.google.com/netapp/volumes)\n2. Select **CMEK policies**.\n\n3. Find the CMEK policy you want to delete and click **Show more**.\n\n4. Select **Delete**.\n\n5. To confirm your selection, enter a name in the **CMEK policy name**\n field.\n\n6. Click **Delete**.\n\n### gcloud\n\nUse the following instructions to delete a CMEK policy using the Google Cloud CLI.\n\nDelete the CMEK policy: \n\n```bash\ngcloud netapp kms-configs delete CONFIG_NAME \\\n --project=PROJECT_ID \\\n --location=LOCATION \\\n```\n\nReplace the following information:\n\n- \u003cvar translate=\"no\"\u003eCONFIG_NAME\u003c/var\u003e: the name of the config\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: the name of the project the CMEK\n policy is in\n\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: the region of the config you want to\n delete\n\nFor more options, see [Google Cloud SDK documentation for Cloud Key Management Service](/sdk/gcloud/reference/netapp/kms-configs).\n\nWhat's next\n-----------\n\n[Migrate volumes to CMEK](/netapp/volumes/docs/configure-and-use/cmek/migrate-to-CMEK)."]]
