gcloud alpha kms keys set-iam-policy - set the IAM policy for a key

gcloud alpha kms keys set-iam-policy(KEY :--keyring=KEYRING--location=LOCATION)POLICY_FILE[GCLOUD_WIDE_FLAG …]

Seehttps://cloud.google.com/iam/docs/managing-policiesfor details of the policy file format and contents.

gcloudalphakmskeysset-iam-policyfrodopolicy.json--keyringfellowship--locationglobal

Seehttps://cloud.google.com/iam/docs/managing-policiesfor details of the policy file format and contents.

Key resource - The key whose IAM policy to update. The arguments in this groupcan be used to specify the attributes of this resource. (NOTE) Some attributesare not given arguments in this group but can be set in other ways.

To set theproject attribute:

• provide the argumentkey on the command line with a fully specifiedname;
• provide the argument--project on the command line;
• set the propertycore/project.

This must be specified.

KEY

ID of the key or fully qualified identifier for the key.

To set thekey attribute:

• provide the argumentkey on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--keyring=KEYRING

The containing keyring.

To set thekeyring attribute:

• provide the argumentkey on the command line with a fully specifiedname;
• provide the argument--keyring on the command line.

--location=LOCATION

The location of the resource.

To set thelocation attribute:

• provide the argumentkey on the command line with a fully specifiedname;
• provide the argument--location on the command line.

POLICY_FILE

Path to a local JSON or YAML formatted file containing a valid policy.

The output of theget-iam-policy command is a valid file, as is anyJSON or YAML file conforming to the structure of aPolicy.

Run$gcloud help for details.