gcloud kms keys - create and manage keys
gcloud kms keys GROUP | COMMAND [GCLOUD_WIDE_FLAG ...]
A key represents a logical key that can be used for cryptographic operations.
These flags are available to all commands: --help.
Run $ gcloud help for details.
GROUP is one of the following:
- versions
Create and manage versions.
COMMAND is one of the following:
- add-iam-policy-binding
Add IAM policy binding for a kms key.
- create
Create a new key.
- describe
Get metadata for a given key.
- get-iam-policy
Get the IAM policy for a key.
- list
List the keys within a keyring.
- remove-iam-policy-binding
Remove IAM policy binding for a kms key.
- remove-rotation-schedule
Remove the rotation schedule for a key.
- set-iam-policy
Set the IAM policy for a key.
- set-primary-version
Set the primary version of a key.
- set-rotation-schedule
Update the rotation schedule for a key.
- update
Update a key.
These variants are also available:
$ gcloud alpha kms keys
$ gcloud beta kms keys