gcloud alpha kms keys versions create

NAME
gcloud alpha kms keys versions create - create a new version
SYNOPSIS
gcloud alpha kms keys versions create[--ekm-connection-key-path=EKM_CONNECTION_KEY_PATH][--external-key-uri=EXTERNAL_KEY_URI][--key=KEY][--keyring=KEYRING][--location=LOCATION][--primary][GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) Creates a new version within the given key.
EXAMPLES
The following command creates a new version within thefrodo key,fellowship keyring, andglobal location and sets it asthe primary version:
gcloudalphakmskeysversionscreate--location=global--keyring=fellowship--key=frodo--primary

The following command creates a new version within thelegolas key,fellowship keyring,us-central1 location,https://example.kms/v0/some/key/path as the address for itsexternal key, and sets it as the key's primary version:

gcloudalphakmskeysversionscreate--location=us-central1--keyring=fellowship--key=legolas--external-key-uri=https://example.kms/v0/some/key/path--primary

The following command creates a new version within thebilbo key,fellowship keyring,us-central1 location,v0/some/key/path as the ekm connection key path for its externalkey, and sets it as the key's primary version:

gcloudalphakmskeysversionscreate--location=us-central1--keyring=fellowship--key=bilbo--ekm-connection-key-path=v0/some/key/path--primary
FLAGS
--ekm-connection-key-path=EKM_CONNECTION_KEY_PATH
The path to the external key material on the EKM for keys with protection level"external-vpc".
--external-key-uri=EXTERNAL_KEY_URI
The URI of the external key for keys with protection level "external".
--key=KEY
The containing key.
--keyring=KEYRING
Key ring of the key.
--location=LOCATION
Location of the keyring.
--primary
If specified, immediately makes the new version primary. This should only beused with theencryption purpose.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudkmskeysversionscreate
gcloudbetakmskeysversionscreate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.