kaj_policy_config
Creates, updates, deletes, gets or lists a kaj_policy_config resource.
Overview
| Name | kaj_policy_config |
| Type | Resource |
| Id | google.cloudkms.kaj_policy_config |
Fields
The following fields are returned by SELECT queries:
- get_kaj_policy_config
| Name | Datatype | Description |
|---|---|---|
name | string | Identifier. Represents the resource name for this KeyAccessJustificationsPolicyConfig in the format of "{organizations|folders|projects}/*/kajPolicyConfig". |
defaultKeyAccessJustificationPolicy | object | Optional. Specifies the default key access justifications (KAJ) policy used when a CryptoKey is created in this folder. This is only used when a Key Access Justifications policy is not provided in the CreateCryptoKeyRequest. This overrides any default policies in its ancestry. If this field is unset, or is set but contains an empty allowed_access_reasons list, no default Key Access Justifications (KAJ) policy configuration is active. In this scenario, all newly created keys will default to an "allow-all" policy. (id: KeyAccessJustificationsPolicy) |
defaultPolicyAvailable | boolean | Output only. Indicates whether this parent resource is available to default policy feature. Please consult the prerequisite of default policy feature for more details. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get_kaj_policy_config | select | organizationsId | Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder, or project. | |
update_kaj_policy_config | update | organizationsId | updateMask | Updates the KeyAccessJustificationsPolicyConfig for a given organization, folder, or project. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
organizationsId | string | |
updateMask | string (google-fieldmask) |
SELECT examples
- get_kaj_policy_config
Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder, or project.
SELECT
name,
defaultKeyAccessJustificationPolicy,
defaultPolicyAvailable
FROM google.cloudkms.kaj_policy_config
WHERE organizationsId = '{{ organizationsId }}' -- required
;
UPDATE examples
- update_kaj_policy_config
Updates the KeyAccessJustificationsPolicyConfig for a given organization, folder, or project.
UPDATE google.cloudkms.kaj_policy_config
SET
data__name = '{{ name }}',
data__defaultKeyAccessJustificationPolicy = '{{ defaultKeyAccessJustificationPolicy }}'
WHERE
organizationsId = '{{ organizationsId }}' --required
AND updateMask = '{{ updateMask}}'
RETURNING
name,
defaultKeyAccessJustificationPolicy,
defaultPolicyAvailable;