CustomerEncryptionKey constructor

const CustomerEncryptionKey({
  1. Input<String>? kmsKey,
  2. Input<String>? kmsKeyServiceAccount,
})

Creates a new CustomerEncryptionKey. kmsKey Immutable. The name of the Google Cloud KMS encryption key. For example, "projects/PROJECT_ID/locations/REGION/keyRings/KEY_RING/cryptoKeys/KEY_NAME". The key must be in the same region as the workstation configuration. kmsKeyServiceAccount Immutable. The service account to use with the specified KMS key. We recommend that you use a separate service account and follow KMS best practices. For more information, see Separation of duties and gcloud kms keys add-iam-policy-binding --member.

Implementation

const CustomerEncryptionKey({
  this.kmsKey,
  this.kmsKeyServiceAccount,
});