gcloud kms keys

NAME
gcloud kms keys - create and manage keys
SYNOPSIS
gcloud kms keysGROUP |COMMAND[GCLOUD_WIDE_FLAG …]
DESCRIPTION
A key represents a logical key that can be used for cryptographic operations.
GCLOUD WIDE FLAGS
These flags are available to all commands:--help.

Run$gcloud help for details.

GROUPS
GROUP is one of the following:
versions
Create and manage versions.
COMMANDS
COMMAND is one of the following:
add-iam-policy-binding
Add IAM policy binding for a kms key.
create
Create a new key.
describe
Get metadata for a given key.
get-iam-policy
Get the IAM policy for a key.
list
List the keys within a keyring.
remove-iam-policy-binding
Remove IAM policy binding for a kms key.
remove-rotation-schedule
Remove the rotation schedule for a key.
set-iam-policy
Set the IAM policy for a key.
set-primary-version
Set the primary version of a key.
set-rotation-schedule
Update the rotation schedule for a key.
update
Update a key.
NOTES
These variants are also available:
gcloudalphakmskeys
gcloudbetakmskeys

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.