CmekSettings

import type { CmekSettings } from "https://googleapis.deno.dev/v1/observability:v1.ts";

Settings for configuring CMEK for a bucket.

interface CmekSettings {

kmsKey?: string;

readonly kmsKeyVersion?: string;

readonly serviceAccountId?: string;

}

§Properties

kmsKey?: string

[src]

Optional. The resource name for the configured Cloud KMS key. The format is: projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY] For example: projects/my-project/locations/us-central1/keyRings/my-ring/cryptoKeys/my-key

readonly kmsKeyVersion?: string

[src]

Output only. The CryptoKeyVersion resource name for the configured Cloud KMS key. The format is: projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]/cryptoKeyVersions/[VERSION] For example: projects/my-project/locations/us-central1/keyRings/my-ring/cryptoKeys/my-key/cryptoKeyVersions/1 This read-only field is used to convey the specific configured CryptoKeyVersion of the kms_key that has been configured. It is populated when the CMEK settings are bound to a single key version.

readonly serviceAccountId?: string

[src]

Output only. The service account used to access the key.