Mantenha tudo organizado com as coleções
Salve e categorize o conteúdo com base nas suas preferências.
Nesta página, fornecemos instruções sobre como editar ou excluir uma política de chave de criptografia gerenciada pelo cliente (CMEK).
Editar uma política de CMEK
É possível mudar os rótulos e a descrição de uma política de CMEK, mas não é possível especificar uma chave diferente para ser usada. Para especificar uma chave diferente, atualize a política de CMEK, que só funciona se ainda não estiver sendo usada por um pool de armazenamento.
Siga estas instruções para editar uma política de CMEK usando o console Google Cloud
ou a Google Cloud CLI.
Console
Use as instruções a seguir para editar uma política de CMEK no console do Google Cloud .
Só é possível mudar a descrição e os rótulos de uma política de CMEK.
Acesse a página NetApp Volumes no console do Google Cloud .
[[["Fácil de entender","easyToUnderstand","thumb-up"],["Meu problema foi resolvido","solvedMyProblem","thumb-up"],["Outro","otherUp","thumb-up"]],[["Difícil de entender","hardToUnderstand","thumb-down"],["Informações incorretas ou exemplo de código","incorrectInformationOrSampleCode","thumb-down"],["Não contém as informações/amostras de que eu preciso","missingTheInformationSamplesINeed","thumb-down"],["Problema na tradução","translationIssue","thumb-down"],["Outro","otherDown","thumb-down"]],["Última atualização 2025-09-03 UTC."],[],[],null,["# Manage CMEK policies\n\nThis page provides instructions on how to edit or delete a customer-managed\nencryption key (CMEK) policy.\n\nEdit a CMEK policy\n------------------\n\nYou can change the labels and description of a CMEK policy, but you cannot\nspecify a different key to be used. To specify a different key, you need to\nupdate the CMEK policy, which only works if it isn't already being used by a\nstorage pool.\n\nUse the following instructions to edit a CMEK policy using the Google Cloud console\nor Google Cloud CLI. \n\n### Console\n\nUse the following instructions to edit a CMEK policy in the Google Cloud console.\nYou can only change a CMEK policy description and its labels.\n\n1. Go to the **NetApp Volumes** page in the Google Cloud console.\n\n [Go to NetApp Volumes](https://console.cloud.google.com/netapp/volumes)\n2. Select **CMEK policies**.\n\n3. Find the CMEK policy you want to edit and click **Show more**.\n\n4. Select **Edit**.\n\n5. Optional: Change the description in the **Description** field.\n\n6. Optional: Add, modify, or delete labels.\n\n### gcloud\n\nRun the following command to edit a CMEK policy in Google Cloud CLI: \n\n```json\ngcloud netapp kms-configs update CONFIG_NAME \\\n --project=\u003cvar label=\"project ID\" translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e \\\n --location=\u003cvar label=\"location\" translate=\"no\"\u003eLOCATION\u003c/var\u003e \\\n --description=\u003cvar label=\"description\" translate=\"no\"\u003eDESCRIPTION\u003c/var\u003e \\\n --labels=\u003cvar label=\"labels\" translate=\"no\"\u003eLABELS\u003c/var\u003e \\\n```\n\nFor more options, see [Google Cloud SDK documentation for Cloud Key Management Service](/sdk/gcloud/reference/netapp/kms-configs).\n\nDelete a CMEK policy\n--------------------\n\nYou can delete a CMEK policy if the policy is unused by any storage pools. \n\n### Console\n\nUse the following instructions to delete a CMEK policy using the\nGoogle Cloud console:\n\n1. Go to the **NetApp Volumes** page in the Google Cloud console.\n\n [Go to NetApp Volumes](https://console.cloud.google.com/netapp/volumes)\n2. Select **CMEK policies**.\n\n3. Find the CMEK policy you want to delete and click **Show more**.\n\n4. Select **Delete**.\n\n5. To confirm your selection, enter a name in the **CMEK policy name**\n field.\n\n6. Click **Delete**.\n\n### gcloud\n\nUse the following instructions to delete a CMEK policy using the Google Cloud CLI.\n\nDelete the CMEK policy: \n\n```bash\ngcloud netapp kms-configs delete CONFIG_NAME \\\n --project=PROJECT_ID \\\n --location=LOCATION \\\n```\n\nReplace the following information:\n\n- \u003cvar translate=\"no\"\u003eCONFIG_NAME\u003c/var\u003e: the name of the config\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: the name of the project the CMEK\n policy is in\n\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: the region of the config you want to\n delete\n\nFor more options, see [Google Cloud SDK documentation for Cloud Key Management Service](/sdk/gcloud/reference/netapp/kms-configs).\n\nWhat's next\n-----------\n\n[Migrate volumes to CMEK](/netapp/volumes/docs/configure-and-use/cmek/migrate-to-CMEK)."]]
