Skip to main content


No description

type GoogleCloudKMSKey {
metadata: ResourceMetadata!
iamPolicy: GoogleCloudIAMPolicy!
name: String!
createdAt: DateTime!
cryptoKeyBackend: String!
destroyScheduledDuration: Int64!
importOnly: Boolean!
labels: [GoogleCloudKMSKeyLabel!]!
nextRotatedAt: DateTime!
primary: GoogleCloudKMSKeyVersion
purpose: GoogleCloudKMSKeyPurpose!
rotationPeriod: Int64
versionTemplate: GoogleCloudKMSKeyVersionTemplate


GoogleCloudKMSKey.metadata ● ResourceMetadata! non-null object

The metadata to identify this resource in Shisho Cloud

GoogleCloudKMSKey.iamPolicy ● GoogleCloudIAMPolicy! non-null object

The IAM policy of the Google KMS ● String! non-null scalar

The key name The format: projects/*/locations/*/keyRings/*/cryptoKeys/*

GoogleCloudKMSKey.createdAt ● DateTime! non-null scalar

The created date/time

GoogleCloudKMSKey.cryptoKeyBackend ● String! non-null scalar

The resource name of the backend environment The format: projects/*/locations/*/ekmConnections/*

GoogleCloudKMSKey.destroyScheduledDuration ● Int64! non-null scalar

The period that versions of this key spend in the DESTROY_SCHEDULED state before transitioning to DESTROYED

GoogleCloudKMSKey.importOnly ● Boolean! non-null scalar

Indicates whether this key may contain imported versions only

GoogleCloudKMSKey.labels ● [GoogleCloudKMSKeyLabel!]! non-null object

The labels See

GoogleCloudKMSKey.nextRotatedAt ● DateTime! non-null scalar

At nextRotatedAt, the Key Management Service will automatically:

  1. Create a new version of this CryptoKey.
  2. Mark the new version as the primary

GoogleCloudKMSKey.primary ● GoogleCloudKMSKeyVersion union

The primary version

GoogleCloudKMSKey.purpose ● GoogleCloudKMSKeyPurpose! non-null enum

The purpose of this CryptoKey

GoogleCloudKMSKey.rotationPeriod ● Int64 scalar

nextRotatedAt will be advanced by this period when the service automatically rotates a key The range: 24 hours and at most 876,000 hours

GoogleCloudKMSKey.versionTemplate ● GoogleCloudKMSKeyVersionTemplate object

A template describing settings for new CryptoKeyVersion instances

Member of

GoogleCloudKMSKeyRing object