kaj_policy_config
Creates, updates, deletes, gets or lists a kaj_policy_config resource.
Overview
| Name | kaj_policy_config |
| Type | Resource |
| Id | google.cloudkms.kaj_policy_config |
Fields
The following fields are returned by SELECT queries:
- get_kaj_policy_config
| Name | Datatype | Description |
|---|---|---|
name | string | Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in the format of "{organizations|folders|projects}/*/kajPolicyConfig". |
defaultKeyAccessJustificationPolicy | object | Optional. The default key access justification policy used when a CryptoKey is created in this folder. This is only used when a Key Access Justifications policy is not provided in the CreateCryptoKeyRequest. This overrides any default policies in its ancestry. (id: KeyAccessJustificationsPolicy) |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get_kaj_policy_config | select | organizationsId | Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects. | |
update_kaj_policy_config | update | organizationsId | updateMask | Updates the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
organizationsId | string | |
updateMask | string (google-fieldmask) |
SELECT examples
- get_kaj_policy_config
Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects.
SELECT
name,
defaultKeyAccessJustificationPolicy
FROM google.cloudkms.kaj_policy_config
WHERE organizationsId = '{{ organizationsId }}' -- required
;
UPDATE examples
- update_kaj_policy_config
Updates the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects.
UPDATE google.cloudkms.kaj_policy_config
SET
data__name = '{{ name }}',
data__defaultKeyAccessJustificationPolicy = '{{ defaultKeyAccessJustificationPolicy }}'
WHERE
organizationsId = '{{ organizationsId }}' --required
AND updateMask = '{{ updateMask}}'
RETURNING
name,
defaultKeyAccessJustificationPolicy;