gcloud kms ekm-config set-iam-policy

NAME
gcloud kms ekm-config set-iam-policy - set the IAM policy for an EkmConfig
SYNOPSIS
gcloud kms ekm-config set-iam-policyPOLICY_FILE--location=LOCATION[GCLOUD_WIDE_FLAG …]
DESCRIPTION
Sets the IAM policy for the EkmConfig in a location as defined in a JSON or YAMLfile.

Seehttps://cloud.google.com/iam/docs/managing-policiesfor details of the policy file format and contents.

EXAMPLES
The following command will read am IAM policy defined in a JSON file'policy.json' and set it for the EkmConfig with locationus-central1:
gcloudkmsekm-configset-iam-policypolicy.json--location=us-central1
POSITIONAL ARGUMENTS
POLICY_FILE
JSON or YAML file with the IAM policy
REQUIRED FLAGS
Location resource - The KMS location resource. This represents a Cloud resource.(NOTE) Some attributes are not given arguments in this group but can be set inother ways.

To set theproject attribute:

  • provide the argument--location on the command line with a fullyspecified name;
  • set the propertycore/project.

This must be specified.

--location=LOCATION
ID of the location or fully qualified identifier for the location.

To set thelocation attribute:

  • provide the argument--location on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
These variants are also available:
gcloudalphakmsekm-configset-iam-policy
gcloudbetakmsekm-configset-iam-policy

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.