googleapis.com – cloudkms

Tools (31)

Extracted live via the executor SDK.

• projects.cloudkmsProjectsLocationsEkmConnectionsCreate

  Creates a new EkmConnection in a given Project and Location.

• projects.cloudkmsProjectsLocationsEkmConnectionsList

  Lists EkmConnections.

• projects.cloudkmsProjectsLocationsEkmConnectionsVerifyConnectivity

  Verifies that Cloud KMS can successfully connect to the external key manager specified by an EkmConnection. If there is an error connecting to the EKM, this method returns a FAILED_PRECONDITION status containing structured information as described at https://cloud.google.com/kms/docs/reference/ekm_errors.

• projects.cloudkmsProjectsLocationsGenerateRandomBytes

  Generate random bytes using the Cloud KMS randomness source in the provided location.

• projects.cloudkmsProjectsLocationsKeyRingsCreate

  Create a new KeyRing in a given Project and Location.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCreate

  Create a new CryptoKey within a KeyRing. CryptoKey.purpose and CryptoKey.version_template.algorithm are required.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecrypt

  Decrypts data that was encrypted with a public key retrieved from GetPublicKey corresponding to a CryptoKeyVersion with CryptoKey.purpose ASYMMETRIC_DECRYPT.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSign

  Signs data using a CryptoKeyVersion with CryptoKey.purpose ASYMMETRIC_SIGN, producing a signature that can be verified with the public key retrieved from GetPublicKey.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreate

  Create a new CryptoKeyVersion in a CryptoKey. The server will assign the next sequential id. If unset, state will be set to ENABLED.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroy

  Schedule a CryptoKeyVersion for destruction. Upon calling this method, CryptoKeyVersion.state will be set to DESTROY_SCHEDULED, and destroy_time will be set to the time destroy_scheduled_duration in the future. At that time, the state will automatically change to DESTROYED, and the key material will be irrevocably destroyed. Before the destroy_time is reached, RestoreCryptoKeyVersion may be called to reverse the process.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKey

  Returns the public key for the given CryptoKeyVersion. The CryptoKey.purpose must be ASYMMETRIC_SIGN or ASYMMETRIC_DECRYPT.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImport

  Import wrapped key material into a CryptoKeyVersion. All requests must specify a CryptoKey. If a CryptoKeyVersion is additionally specified in the request, key material will be reimported into that version. Otherwise, a new version will be created, and will be assigned the next sequential id within the CryptoKey.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsList

  Lists CryptoKeyVersions.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSign

  Signs data using a CryptoKeyVersion with CryptoKey.purpose MAC, producing a tag that can be verified by another source with the same key.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerify

  Verifies MAC tag using a CryptoKeyVersion with CryptoKey.purpose MAC, and returns a response that indicates whether or not the verification was successful.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatch

  Update a CryptoKeyVersion's metadata. state may be changed between ENABLED and DISABLED using this method. See DestroyCryptoKeyVersion and RestoreCryptoKeyVersion to move between other states.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestore

  Restore a CryptoKeyVersion in the DESTROY_SCHEDULED state. Upon restoration of the CryptoKeyVersion, state will be set to DISABLED, and destroy_time will be cleared.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysDecrypt

  Decrypts data that was protected by Encrypt. The CryptoKey.purpose must be ENCRYPT_DECRYPT.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysEncrypt

  Encrypts data, so that it can only be recovered by a call to Decrypt. The CryptoKey.purpose must be ENCRYPT_DECRYPT.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysList

  Lists CryptoKeys.

• projects.cloudkmsProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersion

  Update the version of a CryptoKey that will be used in Encrypt. Returns an error if called on a key whose purpose is not ENCRYPT_DECRYPT.

• projects.cloudkmsProjectsLocationsKeyRingsImportJobsCreate

  Create a new ImportJob within a KeyRing. ImportJob.import_method is required.

• projects.cloudkmsProjectsLocationsKeyRingsImportJobsGet

  Returns metadata for a given ImportJob.

• projects.cloudkmsProjectsLocationsKeyRingsImportJobsGetIamPolicy

  Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

• projects.cloudkmsProjectsLocationsKeyRingsImportJobsList

  Lists ImportJobs.

• projects.cloudkmsProjectsLocationsKeyRingsImportJobsSetIamPolicy

  Sets the access control policy on the specified resource. Replaces any existing policy. Can return NOT_FOUND, INVALID_ARGUMENT, and PERMISSION_DENIED errors.

• projects.cloudkmsProjectsLocationsKeyRingsImportJobsTestIamPermissions

  Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a NOT_FOUND error. Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.

• projects.cloudkmsProjectsLocationsKeyRingsList

  Lists KeyRings.

• projects.cloudkmsProjectsLocationsList

  Lists information about the supported locations for this service.

• openapi.previewSpec

  Preview an OpenAPI document before adding it as a source

• openapi.addSource

  Add an OpenAPI source and register its operations as tools