ACryptoKey represents a logical keythat can be used for cryptographic operations.
ACryptoKey is made up of one or moreversions, which represent theactual key material used in cryptographic operations.
Output only. A copy of the "primary"CryptoKeyVersion that will be used byEncrypt when thisCryptoKey is given in [EncryptRequest.name][google.cloud.kms.v1.EncryptRequest.na me]. TheCryptoKey's primary version can be updated via [UpdateCryptoKeyPrimaryVersion][goo gle.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVe rsion]. All keys withpurpose [ENCRYPT_DEC RYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_ DECRYPT] have a primary. For other keys, this field will be omitted.
Output only. The time at which thisCryptoKey was created.
Controls the rate of automatic rotation.
A template describing settings for newCryptoKeyVersion instances. The properties of newCryptoKeyVersion instances created by either [CreateCryptoKeyVersion][google.cl oud.kms.v1.KeyManagementService.CreateCryptoKeyVersion] or auto-rotation are controlled by this template.