gcloud kms ekm-config update Stay organized with collections Save and categorize content based on your preferences.
- NAME
- gcloud kms ekm-config update - update the EkmConfig
- SYNOPSIS
gcloud kms ekm-config update--location=LOCATION[--default-ekm-connection=DEFAULT_EKM_CONNECTION][GCLOUD_WIDE_FLAG …]
- DESCRIPTION
- gcloud kms ekm-config update can be used to update the EkmConfig. Applies to allCryptoKeys and CryptoKeyVersions with a
protection levelofexternal vpc. - EXAMPLES
- The following command sets the default ekm-connection to
laplacefor its projectfooand locationus-east1:gcloudkmsekm-configupdate--location=us-east1--default-ekm-connection="projects/foo/locations/us-east1/ekmConnections/laplace"The following command removes the default-ekm-connection in
us-east1for the current project:gcloudkmsekm-configupdate--location=us-east1--default-ekm-connection="" - REQUIRED FLAGS
- Location resource - The KMS location resource. This represents a Cloud resource.(NOTE) Some attributes are not given arguments in this group but can be set inother ways.
To set the
projectattribute:- provide the argument
--locationon the command line with a fullyspecified name; - set the property
core/project.
This must be specified.
--location=LOCATION- ID of the location or fully qualified identifier for the location.
To set the
locationattribute:- provide the argument
--locationon the command line.
- provide the argument
- provide the argument
- Location resource - The KMS location resource. This represents a Cloud resource.(NOTE) Some attributes are not given arguments in this group but can be set inother ways.
- OPTIONAL FLAGS
--default-ekm-connection=DEFAULT_EKM_CONNECTION- The resource name of the EkmConnection to be used as the default EkmConnectionfor all
external-vpcCryptoKeys in a project and location. Can bean empty string to remove the default EkmConnection.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$gcloud helpfor details. - NOTES
- These variants are also available:
gcloudalphakmsekm-configupdategcloudbetakmsekm-configupdate
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-05-07 UTC.