Skip to main content

ekm_connections

Overview

Nameekm_connections
TypeResource
Idgoogle.cloudkms.ekm_connections

Fields

NameDatatypeDescription
namestringOutput only. The resource name for the EkmConnection in the format projects/*/locations/*/ekmConnections/*.
createTimestringOutput only. The time at which the EkmConnection was created.
cryptoSpacePathstringOptional. Identifies the EKM Crypto Space that this EkmConnection maps to. Note: This field is required if KeyManagementMode is CLOUD_KMS.
etagstringOptional. Etag of the currently stored EkmConnection.
keyManagementModestringOptional. Describes who can perform control plane operations on the EKM. If unset, this defaults to MANUAL.
serviceResolversarrayA list of ServiceResolvers where the EKM can be reached. There should be one ServiceResolver per EKM replica. Currently, only a single ServiceResolver is supported.

Methods

NameAccessible byRequired ParamsDescription
getSELECTekmConnectionsId, locationsId, projectsIdReturns metadata for a given EkmConnection.
listSELECTlocationsId, projectsIdLists EkmConnections.
createINSERTlocationsId, projectsIdCreates a new EkmConnection in a given Project and Location.
_listEXEClocationsId, projectsIdLists EkmConnections.
patchEXECekmConnectionsId, locationsId, projectsIdUpdates an EkmConnection's metadata.
verify_connectivityEXECekmConnectionsId, locationsId, projectsIdVerifies that Cloud KMS can successfully connect to the external key manager specified by an EkmConnection. If there is an error connecting to the EKM, this method returns a FAILED_PRECONDITION status containing structured information as described at https://cloud.google.com/kms/docs/reference/ekm_errors.