kms library
Classes
- AutokeyConfig
-
AutokeyConfigis a singleton resource used to configure the auto-provisioning flow of CryptoKeys for CMEK. - AutokeyConfigArgs
- The set of arguments for AutokeyConfig. The set of arguments for AutokeyConfig.
- AutokeyConfigState
- Input properties used for looking up and filtering AutokeyConfig resources.
- CryptoKey
-
A
CryptoKeyrepresents a logical key that can be used for cryptographic operations. - CryptoKeyArgs
- The set of arguments for CryptoKey. The set of arguments for CryptoKey.
- CryptoKeyIAMBinding
- Three different resources help you manage your IAM policy for KMS crypto key. Each of these resources serves a different use case:
- CryptoKeyIAMBindingArgs
- The set of arguments for CryptoKeyIAMBinding. The set of arguments for CryptoKeyIAMBinding.
- CryptoKeyIAMBindingCondition
- CryptoKeyIAMBindingState
- Input properties used for looking up and filtering CryptoKeyIAMBinding resources.
- CryptoKeyIAMMember
- Three different resources help you manage your IAM policy for KMS crypto key. Each of these resources serves a different use case:
- CryptoKeyIAMMemberArgs
- The set of arguments for CryptoKeyIAMMember. The set of arguments for CryptoKeyIAMMember.
- CryptoKeyIAMMemberCondition
- CryptoKeyIAMMemberState
- Input properties used for looking up and filtering CryptoKeyIAMMember resources.
- CryptoKeyIAMPolicy
- Three different resources help you manage your IAM policy for KMS crypto key. Each of these resources serves a different use case:
- CryptoKeyIAMPolicyArgs
- The set of arguments for CryptoKeyIAMPolicy. The set of arguments for CryptoKeyIAMPolicy.
- CryptoKeyIAMPolicyState
- Input properties used for looking up and filtering CryptoKeyIAMPolicy resources.
- CryptoKeyKeyAccessJustificationsPolicy
- CryptoKeyPrimary
- CryptoKeyState
- Input properties used for looking up and filtering CryptoKey resources.
- CryptoKeyVersion
-
A
CryptoKeyVersionrepresents an individual cryptographic key, and the associated key material. - CryptoKeyVersionArgs
- The set of arguments for CryptoKeyVersion. The set of arguments for CryptoKeyVersion.
- CryptoKeyVersionAttestation
- CryptoKeyVersionAttestationCertChains
- CryptoKeyVersionAttestationExternalProtectionLevelOptions
- CryptoKeyVersionExternalProtectionLevelOptions
- CryptoKeyVersionState
- Input properties used for looking up and filtering CryptoKeyVersion resources.
- CryptoKeyVersionTemplate
- EkmConnection
-
Ekm Connectionsare used to control the connection settings for anEXTERNAL_VPCCryptoKey. It is used to connect customer's external key manager to Google Cloud EKM. - EkmConnectionArgs
- The set of arguments for EkmConnection. The set of arguments for EkmConnection.
- EkmConnectionIamBinding
- Three different resources help you manage your IAM policy for Cloud Key Management Service EkmConnection. Each of these resources serves a different use case:
- EkmConnectionIamBindingArgs
- The set of arguments for EkmConnectionIamBinding. The set of arguments for EkmConnectionIamBinding.
- EkmConnectionIamBindingCondition
- EkmConnectionIamBindingState
- Input properties used for looking up and filtering EkmConnectionIamBinding resources.
- EkmConnectionIamMember
- Three different resources help you manage your IAM policy for Cloud Key Management Service EkmConnection. Each of these resources serves a different use case:
- EkmConnectionIamMemberArgs
- The set of arguments for EkmConnectionIamMember. The set of arguments for EkmConnectionIamMember.
- EkmConnectionIamMemberCondition
- EkmConnectionIamMemberState
- Input properties used for looking up and filtering EkmConnectionIamMember resources.
- EkmConnectionIamPolicy
- Three different resources help you manage your IAM policy for Cloud Key Management Service EkmConnection. Each of these resources serves a different use case:
- EkmConnectionIamPolicyArgs
- The set of arguments for EkmConnectionIamPolicy. The set of arguments for EkmConnectionIamPolicy.
- EkmConnectionIamPolicyState
- Input properties used for looking up and filtering EkmConnectionIamPolicy resources.
- EkmConnectionServiceResolver
- EkmConnectionServiceResolverServerCertificate
- EkmConnectionState
- Input properties used for looking up and filtering EkmConnection resources.
- FolderKajPolicyConfig
-
FolderKajPolicyConfigsis a folder-level singleton resource used to configure the default KAJ policy of newly created key. - FolderKajPolicyConfigArgs
- The set of arguments for FolderKajPolicyConfig. The set of arguments for FolderKajPolicyConfig.
- FolderKajPolicyConfigDefaultKeyAccessJustificationPolicy
- FolderKajPolicyConfigState
- Input properties used for looking up and filtering FolderKajPolicyConfig resources.
- GetAutokeyConfigArgs
- Arguments for getAutokeyConfig. Arguments for getAutokeyConfig.
- GetAutokeyConfigResult
- Result data returned by getAutokeyConfig.
- GetCryptoKeyIamPolicyArgs
- Arguments for getCryptoKeyIamPolicy. Arguments for getCryptoKeyIamPolicy.
- GetCryptoKeyIamPolicyResult
- Result data returned by getCryptoKeyIamPolicy.
- GetCryptoKeyLatestVersionArgs
- Arguments for getCryptoKeyLatestVersion. Arguments for getCryptoKeyLatestVersion.
- GetCryptoKeyLatestVersionPublicKey
- GetCryptoKeyLatestVersionResult
- Result data returned by getCryptoKeyLatestVersion.
- GetCryptoKeysArgs
- Arguments for getCryptoKeys. Arguments for getCryptoKeys.
- GetCryptoKeysKey
- GetCryptoKeysKeyKeyAccessJustificationsPolicy
- GetCryptoKeysKeyPrimary
- GetCryptoKeysKeyVersionTemplate
- GetCryptoKeysResult
- Result data returned by getCryptoKeys.
- GetCryptoKeyVersionsArgs
- Arguments for getCryptoKeyVersions. Arguments for getCryptoKeyVersions.
- GetCryptoKeyVersionsPublicKey
- GetCryptoKeyVersionsResult
- Result data returned by getCryptoKeyVersions.
- GetCryptoKeyVersionsVersion
- GetCryptoKeyVersionsVersionPublicKey
- GetEkmConnectionIamPolicyArgs
- Arguments for getEkmConnectionIamPolicy. Arguments for getEkmConnectionIamPolicy.
- GetEkmConnectionIamPolicyResult
- Result data returned by getEkmConnectionIamPolicy.
- GetKeyHandleArgs
- Arguments for getKeyHandle. Arguments for getKeyHandle.
- GetKeyHandleResult
- Result data returned by getKeyHandle.
- GetKeyHandlesArgs
- Arguments for getKeyHandles. Arguments for getKeyHandles.
- GetKeyHandlesKeyHandle
- GetKeyHandlesResult
- Result data returned by getKeyHandles.
- GetKeyRingIamPolicyArgs
- Arguments for getKeyRingIamPolicy. Arguments for getKeyRingIamPolicy.
- GetKeyRingIamPolicyResult
- Result data returned by getKeyRingIamPolicy.
- GetKeyRingsArgs
- Arguments for getKeyRings. Arguments for getKeyRings.
- GetKeyRingsKeyRing
- GetKeyRingsResult
- Result data returned by getKeyRings.
- GetKMSCryptoKeyArgs
- Arguments for getKMSCryptoKey. Arguments for getKMSCryptoKey.
- GetKMSCryptoKeyKeyAccessJustificationsPolicy
- GetKMSCryptoKeyPrimary
- GetKMSCryptoKeyResult
- Result data returned by getKMSCryptoKey.
- GetKMSCryptoKeyVersionArgs
- Arguments for getKMSCryptoKeyVersion. Arguments for getKMSCryptoKeyVersion.
- GetKMSCryptoKeyVersionPublicKey
- GetKMSCryptoKeyVersionResult
- Result data returned by getKMSCryptoKeyVersion.
- GetKMSCryptoKeyVersionTemplate
- GetKMSKeyRingArgs
- Arguments for getKMSKeyRing. Arguments for getKMSKeyRing.
- GetKMSKeyRingResult
- Result data returned by getKMSKeyRing.
- GetKMSSecretArgs
- Arguments for getKMSSecret. Arguments for getKMSSecret.
- GetKMSSecretAsymmetricArgs
- Arguments for getKMSSecretAsymmetric. Arguments for getKMSSecretAsymmetric.
- GetKMSSecretAsymmetricResult
- Result data returned by getKMSSecretAsymmetric.
- GetKMSSecretCiphertextArgs
- Arguments for getKMSSecretCiphertext. Arguments for getKMSSecretCiphertext.
- GetKMSSecretCiphertextResult
- Result data returned by getKMSSecretCiphertext.
- GetKMSSecretResult
- Result data returned by getKMSSecret.
- KeyHandle
-
A
KeyHandleis a resource used to auto-provision CryptoKeys for CMEK. - KeyHandleArgs
- The set of arguments for KeyHandle. The set of arguments for KeyHandle.
- KeyHandleState
- Input properties used for looking up and filtering KeyHandle resources.
- KeyRing
-
A
KeyRingis a toplevel logical grouping ofCryptoKeys. - KeyRingArgs
- The set of arguments for KeyRing. The set of arguments for KeyRing.
- KeyRingIAMBinding
- Three different resources help you manage your IAM policy for KMS key ring. Each of these resources serves a different use case:
- KeyRingIAMBindingArgs
- The set of arguments for KeyRingIAMBinding. The set of arguments for KeyRingIAMBinding.
- KeyRingIAMBindingCondition
- KeyRingIAMBindingState
- Input properties used for looking up and filtering KeyRingIAMBinding resources.
- KeyRingIAMMember
- Three different resources help you manage your IAM policy for KMS key ring. Each of these resources serves a different use case:
- KeyRingIAMMemberArgs
- The set of arguments for KeyRingIAMMember. The set of arguments for KeyRingIAMMember.
- KeyRingIAMMemberCondition
- KeyRingIAMMemberState
- Input properties used for looking up and filtering KeyRingIAMMember resources.
- KeyRingIAMPolicy
- Three different resources help you manage your IAM policy for KMS key ring. Each of these resources serves a different use case:
- KeyRingIAMPolicyArgs
- The set of arguments for KeyRingIAMPolicy. The set of arguments for KeyRingIAMPolicy.
- KeyRingIAMPolicyState
- Input properties used for looking up and filtering KeyRingIAMPolicy resources.
- KeyRingImportJob
-
A
KeyRingImportJobcan be used to createCryptoKeysandCryptoKeyVersionsusing pre-existing key material, generated outside of Cloud KMS. AKeyRingImportJobexpires 3 days after it is created. Once expired, Cloud KMS will no longer be able to import or unwrap any key material that was wrapped with theKeyRingImportJob's public key. - KeyRingImportJobArgs
- The set of arguments for KeyRingImportJob. The set of arguments for KeyRingImportJob.
- KeyRingImportJobAttestation
- KeyRingImportJobPublicKey
- KeyRingImportJobState
- Input properties used for looking up and filtering KeyRingImportJob resources.
- KeyRingState
- Input properties used for looking up and filtering KeyRing resources.
- OrganizationKajPolicyConfig
-
OrganizationKajPolicyConfigis a organization-level singleton resource used to configure the default KAJ policy of newly created key. - OrganizationKajPolicyConfigArgs
- The set of arguments for OrganizationKajPolicyConfig. The set of arguments for OrganizationKajPolicyConfig.
- OrganizationKajPolicyConfigDefaultKeyAccessJustificationPolicy
- OrganizationKajPolicyConfigState
- Input properties used for looking up and filtering OrganizationKajPolicyConfig resources.
- ProjectAutokeyConfig
-
ProjectAutokeyConfigis a singleton resource used to configure the auto-provisioning flow of CryptoKeys for CMEK. - ProjectAutokeyConfigArgs
- The set of arguments for ProjectAutokeyConfig. The set of arguments for ProjectAutokeyConfig.
- ProjectAutokeyConfigState
- Input properties used for looking up and filtering ProjectAutokeyConfig resources.
- ProjectKajPolicyConfig
-
ProjectKajPolicyConfigis a project-level singleton resource used to configure the default KAJ policy of newly created key. - ProjectKajPolicyConfigArgs
- The set of arguments for ProjectKajPolicyConfig. The set of arguments for ProjectKajPolicyConfig.
- ProjectKajPolicyConfigDefaultKeyAccessJustificationPolicy
- ProjectKajPolicyConfigState
- Input properties used for looking up and filtering ProjectKajPolicyConfig resources.
- SecretCiphertext
- Encrypts secret data with Google Cloud KMS and provides access to the ciphertext.
- SecretCiphertextArgs
- The set of arguments for SecretCiphertext. The set of arguments for SecretCiphertext.
- SecretCiphertextState
- Input properties used for looking up and filtering SecretCiphertext resources.
Functions
-
getAutokeyConfig(
GetAutokeyConfigArgs args, {InvokeOptions? options}) → Future< GetAutokeyConfigResult> - Provides access to Google Cloud Platform KMS AutokeyConfig. A AutokeyConfig is a Cloud KMS resource that helps you safely span the separation of duties to create new Cloud KMS keys for CMEK using Autokey.
-
getAutokeyConfigOutput(
GetAutokeyConfigArgs args, {InvokeOutputOptions? options}) → Output< GetAutokeyConfigResult> -
getCryptoKeyIamPolicy(
GetCryptoKeyIamPolicyArgs args, {InvokeOptions? options}) → Future< GetCryptoKeyIamPolicyResult> - Retrieves the current IAM policy data for a Google Cloud KMS crypto key.
-
getCryptoKeyIamPolicyOutput(
GetCryptoKeyIamPolicyArgs args, {InvokeOutputOptions? options}) → Output< GetCryptoKeyIamPolicyResult> -
getCryptoKeyLatestVersion(
GetCryptoKeyLatestVersionArgs args, {InvokeOptions? options}) → Future< GetCryptoKeyLatestVersionResult> - Provides access to the latest Google Cloud Platform KMS CryptoKeyVersion in a CryptoKey. For more information see the official documentation and API.
-
getCryptoKeyLatestVersionOutput(
GetCryptoKeyLatestVersionArgs args, {InvokeOutputOptions? options}) → Output< GetCryptoKeyLatestVersionResult> -
getCryptoKeys(
GetCryptoKeysArgs args, {InvokeOptions? options}) → Future< GetCryptoKeysResult> - Provides access to all Google Cloud Platform KMS CryptoKeys in a given KeyRing. For more information see the official documentation and API.
-
getCryptoKeysOutput(
GetCryptoKeysArgs args, {InvokeOutputOptions? options}) → Output< GetCryptoKeysResult> -
getCryptoKeyVersions(
GetCryptoKeyVersionsArgs args, {InvokeOptions? options}) → Future< GetCryptoKeyVersionsResult> - Provides access to Google Cloud Platform KMS CryptoKeyVersions. For more information see the official documentation and API.
-
getCryptoKeyVersionsOutput(
GetCryptoKeyVersionsArgs args, {InvokeOutputOptions? options}) → Output< GetCryptoKeyVersionsResult> -
getEkmConnectionIamPolicy(
GetEkmConnectionIamPolicyArgs args, {InvokeOptions? options}) → Future< GetEkmConnectionIamPolicyResult> - Retrieves the current IAM policy data for ekmconnection
-
getEkmConnectionIamPolicyOutput(
GetEkmConnectionIamPolicyArgs args, {InvokeOutputOptions? options}) → Output< GetEkmConnectionIamPolicyResult> -
getKeyHandle(
GetKeyHandleArgs args, {InvokeOptions? options}) → Future< GetKeyHandleResult> - Provides access to Google Cloud Platform KMS KeyHandle. A key handle is a Cloud KMS resource that helps you safely span the separation of duties to create new Cloud KMS keys for CMEK using Autokey.
-
getKeyHandleOutput(
GetKeyHandleArgs args, {InvokeOutputOptions? options}) → Output< GetKeyHandleResult> -
getKeyHandles(
GetKeyHandlesArgs args, {InvokeOptions? options}) → Future< GetKeyHandlesResult> - Provides access to Google Cloud Platform KMS KeyHandle. A key handle is a Cloud KMS resource that helps you safely span the separation of duties to create new Cloud KMS keys for CMEK using Autokey.
-
getKeyHandlesOutput(
GetKeyHandlesArgs args, {InvokeOutputOptions? options}) → Output< GetKeyHandlesResult> -
getKeyRingIamPolicy(
GetKeyRingIamPolicyArgs args, {InvokeOptions? options}) → Future< GetKeyRingIamPolicyResult> - Retrieves the current IAM policy data for a Google Cloud KMS key ring.
-
getKeyRingIamPolicyOutput(
GetKeyRingIamPolicyArgs args, {InvokeOutputOptions? options}) → Output< GetKeyRingIamPolicyResult> -
getKeyRings(
GetKeyRingsArgs args, {InvokeOptions? options}) → Future< GetKeyRingsResult> - Provides access to all Google Cloud Platform KMS CryptoKeyRings in a set location. For more information see the official documentation and API.
-
getKeyRingsOutput(
GetKeyRingsArgs args, {InvokeOutputOptions? options}) → Output< GetKeyRingsResult> -
getKMSCryptoKey(
GetKMSCryptoKeyArgs args, {InvokeOptions? options}) → Future< GetKMSCryptoKeyResult> - Provides access to a Google Cloud Platform KMS CryptoKey. For more information see the official documentation and API.
-
getKMSCryptoKeyOutput(
GetKMSCryptoKeyArgs args, {InvokeOutputOptions? options}) → Output< GetKMSCryptoKeyResult> -
getKMSCryptoKeyVersion(
GetKMSCryptoKeyVersionArgs args, {InvokeOptions? options}) → Future< GetKMSCryptoKeyVersionResult> - Provides access to a Google Cloud Platform KMS CryptoKeyVersion. For more information see the official documentation and API.
-
getKMSCryptoKeyVersionOutput(
GetKMSCryptoKeyVersionArgs args, {InvokeOutputOptions? options}) → Output< GetKMSCryptoKeyVersionResult> -
getKMSKeyRing(
GetKMSKeyRingArgs args, {InvokeOptions? options}) → Future< GetKMSKeyRingResult> - Provides access to Google Cloud Platform KMS KeyRing. For more information see the official documentation and API.
-
getKMSKeyRingOutput(
GetKMSKeyRingArgs args, {InvokeOutputOptions? options}) → Output< GetKMSKeyRingResult> -
getKMSSecret(
GetKMSSecretArgs args, {InvokeOptions? options}) → Future< GetKMSSecretResult> - This data source allows you to use data encrypted with Google Cloud KMS within your resource definitions.
-
getKMSSecretAsymmetric(
GetKMSSecretAsymmetricArgs args, {InvokeOptions? options}) → Future< GetKMSSecretAsymmetricResult> - This data source allows you to use data encrypted with a Google Cloud KMS asymmetric key within your resource definitions.
-
getKMSSecretAsymmetricOutput(
GetKMSSecretAsymmetricArgs args, {InvokeOutputOptions? options}) → Output< GetKMSSecretAsymmetricResult> -
getKMSSecretCiphertext(
GetKMSSecretCiphertextArgs args, {InvokeOptions? options}) → Future< GetKMSSecretCiphertextResult> -
> Warning: This data source is deprecated. Use the
gcp.kms.SecretCiphertextresource instead. -
getKMSSecretCiphertextOutput(
GetKMSSecretCiphertextArgs args, {InvokeOutputOptions? options}) → Output< GetKMSSecretCiphertextResult> -
getKMSSecretOutput(
GetKMSSecretArgs args, {InvokeOutputOptions? options}) → Output< GetKMSSecretResult>