Console

Class CmekConfig (0.13.11)

CmekConfig(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Configurations used to enable CMEK data encryption with Cloud KMS keys.

Attributes
Name	Description
`name`	`str` Required. The name of the CmekConfig of the form `projects/{project}/locations/{location}/cmekConfig` or `projects/{project}/locations/{location}/cmekConfigs/{cmek_config}`.
`kms_key`	`str` KMS key resource name which will be used to encrypt resources `projects/{project}/locations/{location}/keyRings/{keyRing}/cryptoKeys/{keyId}`.
`kms_key_version`	`str` KMS key version resource name which will be used to encrypt resources .
`state`	`google.cloud.discoveryengine_v1.types.CmekConfig.State` Output only. The states of the CmekConfig.
`is_default`	`bool` Output only. The default CmekConfig for the Customer.
`last_rotation_timestamp_micros`	`int` Output only. The timestamp of the last key rotation.
`single_region_keys`	`MutableSequence[google.cloud.discoveryengine_v1.types.SingleRegionKey]` Optional. Single-regional CMEKs that are required for some VAIS features.
`notebooklm_state`	`google.cloud.discoveryengine_v1.types.CmekConfig.NotebookLMState` Output only. Whether the NotebookLM Corpus is ready to be used.

Classes

NotebookLMState(value)

States of NotebookLM.

State(value)

States of the CmekConfig.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-08-07 UTC.