gcloud beta assured workloads create - create a new Assured Workloads environment

gcloud beta assured workloads create--billing-account=BILLING_ACCOUNT--compliance-regime=COMPLIANCE_REGIME--display-name=DISPLAY_NAME--location=LOCATION--organization=ORGANIZATION[--enable-sovereign-controls=ENABLE_SOVEREIGN_CONTROLS][--external-identifier=EXTERNAL_IDENTIFIER][--labels=[KEY=VALUE,…]][--next-rotation-time=NEXT_ROTATION_TIME][--partner=PARTNER][--partner-permissions=[KEY=VALUE,…]][--partner-services-billing-account=PARTNER_SERVICES_BILLING_ACCOUNT][--provisioned-resources-parent=PROVISIONED_RESOURCES_PARENT][--resource-settings=[KEY=VALUE,…]][--rotation-period=ROTATION_PERIOD][GCLOUD_WIDE_FLAG …]

• belonging to an organization with ID 123
• located in theus-central1 region
• display nameTest-Workload
• compliance regimeFEDRAMP_MODERATE
• billing accountbillingAccounts/456
• first key rotation set for 10:15am on the December 30, 2020
• key rotation interval set for every 48 hours
• with the label: key = 'LabelKey1', value = 'LabelValue1'
• with the label: key = 'LabelKey2', value = 'LabelValue2'
• provisioned resources parent 'folders/789'
• with custom project id 'my-custom-id' for consumer project
• with external identifier for the workload of 'external-id'

gcloudbetaassuredworkloadscreate--organization=123--location=us-central1--display-name=Test-Workload--compliance-regime=FEDRAMP_MODERATE--billing-account=billingAccounts/456--next-rotation-time=2020-12-30T10:15:00.00Z--rotation-period=172800s--labels=LabelKey1=LabelValue1,LabelKey2=LabelValue2--provisioned-resources-parent=folders/789--resource-settings=consumer-project-id=my-custom-id--external-identifier=external-id

• belonging to an organization with ID 123
• located in theme-central2 region
• display nameTest-Workload
• partnerCNTXT
• partner services billing accountbillingAccounts/789
• billing accountbillingAccounts/456
• data logs viewer partner permission enabled
• first key rotation set for 10:15am on the December 30, 2020
• key rotation interval set for every 48 hours
• with the label: key = 'LabelKey1', value = 'LabelValue1'
• with the label: key = 'LabelKey2', value = 'LabelValue2'
• provisioned resources parent 'folders/789'
• with custom project id 'my-custom-id' for consumer project
• with external identifier for the workload of 'external-id'

gcloudbetaassuredworkloadscreate--organization=123--location=me-central2--display-name=Test-Workload--compliance-regime=ASSURED_WORKLOADS_FOR_PARTNERS--partner=SOVEREIGN_CONTROLS_BY_CNTXT--partner-services-billing-account=billingAccounts/01BF3F-2C6DE5-30C607--partner-permissions=data-logs-viewer=true--billing-account=billingAccounts/456--next-rotation-time=2020-12-30T10:15:00.00Z--rotation-period=172800s--labels=LabelKey1=LabelValue1,LabelKey2=LabelValue2--provisioned-resources-parent=folders/789--resource-settings=consumer-project-id=my-custom-id--external-identifier=external-id

--billing-account=BILLING_ACCOUNT

The billing account of the new Assured Workloads environment, for example,billingAccounts/0000AA-AAA00A-A0A0A0

--compliance-regime=COMPLIANCE_REGIME

The compliance regime of the new Assured Workloads environment.COMPLIANCE_REGIME must be one of:assured-workloads-for-partners,au-regions-and-us-support,australia-data-boundary-and-support,ca-protected-b,ca-regions-and-support,canada-controlled-goods,canada-data-boundary-and-support,cjis,data-boundary-for-canada-controlled-goods,data-boundary-for-canada-protected-b,data-boundary-for-cjis,data-boundary-for-fedramp-high,data-boundary-for-fedramp-moderate,data-boundary-for-il2,data-boundary-for-il4,data-boundary-for-il5,data-boundary-for-irs-publication-1075,data-boundary-for-itar,eu-data-boundary-and-support,eu-regions-and-support,fedramp-high,fedramp-moderate,healthcare-and-life-sciences-controls,healthcare-and-life-sciences-controls-us-support,hipaa,hitrust,il2,il4,il5,irs-1075,isr-regions,isr-regions-and-support,israel-data-boundary-and-support,itar,japan-data-boundary,jp-regions-and-support,ksa-data-boundary-with-access-justifications,ksa-regions-and-support-with-sovereignty-controls,regional-controls,regional-data-boundary,us-data-boundary-and-support,us-data-boundary-for-healthcare-and-life-sciences,us-data-boundary-for-healthcare-and-life-sciences-with-support,us-regional-access.

--display-name=DISPLAY_NAME

The display name of the new Assured Workloads environment

--location=LOCATION

The location of the new Assured Workloads environment. For a current list ofsupported LOCATION values, seeAssuredWorkloads locations.

--organization=ORGANIZATION

The parent organization of the new Assured Workloads environment, provided as anorganization ID

--enable-sovereign-controls=ENABLE_SOVEREIGN_CONTROLS

If true, enable sovereign controls for the new Assured Workloads environment,currently only supported by EU_REGIONS_AND_SUPPORT

--external-identifier=EXTERNAL_IDENTIFIER

The external identifier of the new Assured Workloads environment

--labels=[KEY=VALUE,…]

The labels of the new Assured Workloads environment, for example,LabelKey1=LabelValue1,LabelKey2=LabelValue2

--next-rotation-time=NEXT_ROTATION_TIME

The next rotation time of the KMS settings of new Assured Workloads environment,for example, 2020-12-30T10:15:30.00Z

--partner=PARTNER

The partner choice when creating a workload managed by local trusted partners.PARTNER must be one of:local-controls-by-s3ns,sovereign-controls-by-cntxt,sovereign-controls-by-cntxt-no-ekm,sovereign-controls-by-psn,sovereign-controls-by-sia-minsait,sovereign-controls-by-t-systems.

--partner-permissions=[KEY=VALUE,…]

The partner permissions for the partner regime, for example,data-logs-viewer=true/false

--partner-services-billing-account=PARTNER_SERVICES_BILLING_ACCOUNT

Billing account necessary for purchasing services from Sovereign Partners. Thisfield is required for creating SIA/PSN/CNTXT partner workloads. The callershould have 'billing.resourceAssociations.create' IAM permission on thisbilling-account. The format of this string isbillingAccounts/AAAAAA-BBBBBB-CCCCCC

--provisioned-resources-parent=PROVISIONED_RESOURCES_PARENT

The parent of the provisioned projects, for example, folders/{FOLDER_ID}

--resource-settings=[KEY=VALUE,…]

A comma-separated, key=value map of custom resource settings such as customproject ids, for example: consumer-project-id={CONSUMER_PROJECT_ID} Note:Currently only encryption-keys-project-id, encryption-keys-project-name andkeyring-id are supported. The encryption-keys-project-id,encryption-keys-project-name and keyring-id settings can be specified only ifKMS settings are provided

--rotation-period=ROTATION_PERIOD

The rotation period of the KMS settings of the new Assured Workloadsenvironment, for example, 172800s

Run$gcloud help for details.