gcloud alpha kms import-jobs create

NAME
gcloud alpha kms import-jobs create - create a new import job
SYNOPSIS
gcloud alpha kms import-jobs createIMPORT_JOB--import-method=IMPORT_METHOD--protection-level=PROTECTION_LEVEL[--keyring=KEYRING][--location=LOCATION][--single-tenant-hsm-instance=SINGLE_TENANT_HSM_INSTANCE][GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) Creates a new import job within the given keyring.
EXAMPLES
The following command creates a new import job namedstrider withinthefellowship keyring, andus-central1 location:
gcloudalphakmsimport-jobscreatestrider--location=us-central1--keyring=fellowship--import-method=rsa-oaep-3072-sha256-aes-256--protection-level=hsm

The following command creates a new import job namedstrider withinthefellowship keyring, andus-central1 location:

gcloudalphakmsimport-jobscreatestrider--location=us-central1--keyring=fellowship--import-method=rsa-oaep-3072-sha256-aes-256--protection-level=hsm-single-tenant--single-tenant-hsm-instance=my_sthi
POSITIONAL ARGUMENTS
IMPORT_JOB
Name of the import job to create.
REQUIRED FLAGS
--import-method=IMPORT_METHOD
The wrapping method to be used for incoming key material. For more informationabout choosing an import method, seehttps://cloud.google.com/kms/docs/key-wrapping.IMPORT_METHOD must be one of:rsa-oaep-3072-sha1-aes-256,rsa-oaep-3072-sha256,rsa-oaep-3072-sha256-aes-256,rsa-oaep-4096-sha1-aes-256,rsa-oaep-4096-sha256,rsa-oaep-4096-sha256-aes-256.
--protection-level=PROTECTION_LEVEL
Protection level of the import job.PROTECTION_LEVELmust be one of:software,hsm,hsm-single-tenant.
OPTIONAL FLAGS
--keyring=KEYRING
Key ring of the import job.
--location=LOCATION
Location of the import job.
--single-tenant-hsm-instance=SINGLE_TENANT_HSM_INSTANCE
The single tenant HSM instance to use for the import job.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudkmsimport-jobscreate
gcloudbetakmsimport-jobscreate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-16 UTC.