Reference documentation and code samples for the Cloud Key Management Service (KMS) V1 API module Google::Cloud::Kms::V1::Autokey.
Provides interfaces for using Cloud KMS Autokey to provision new
CryptoKeys, ready for Customer Managed
Encryption Key (CMEK) use, on-demand. To support certain client tooling, this
feature is modeled around a KeyHandle
resource: creating a KeyHandle in a resource
project and given location triggers Cloud KMS Autokey to provision a
CryptoKey in the configured key project and
the same location.
Prior to use in a given resource project,
UpdateAutokeyConfig
should have been called on an ancestor folder, setting the key project where
Cloud KMS Autokey should create new
CryptoKeys. See documentation for additional
prerequisites. To check what key project, if any, is currently configured on
a resource project's ancestor folder, see
ShowEffectiveAutokeyConfig.
To load this service and instantiate a REST client: