kaj_policy_config

Creates, updates, deletes, gets or lists a kaj_policy_config resource.

Overview

Name	kaj_policy_config
Type	Resource
Id	google.cloudkms.kaj_policy_config

Fields

The following fields are returned by SELECT queries:

get_kaj_policy_config

Name	Datatype	Description
name	string	Identifier. Represents the resource name for this KeyAccessJustificationsPolicyConfig in the format of "{organizations|folders|projects}/*/kajPolicyConfig".
defaultKeyAccessJustificationPolicy	object	Optional. Specifies the default key access justifications (KAJ) policy used when a CryptoKey is created in this folder. This is only used when a Key Access Justifications policy is not provided in the CreateCryptoKeyRequest. This overrides any default policies in its ancestry. If this field is unset, or is set but contains an empty allowed_access_reasons list, no default Key Access Justifications (KAJ) policy configuration is active. In this scenario, all newly created keys will default to an "allow-all" policy. (id: KeyAccessJustificationsPolicy)
defaultPolicyAvailable	boolean	Output only. Indicates whether this parent resource is available to default policy feature. Please consult the prerequisite of default policy feature for more details.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_kaj_policy_config	select	foldersId		Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder, or project.
update_kaj_policy_config	update	foldersId	updateMask	Updates the KeyAccessJustificationsPolicyConfig for a given organization, folder, or project.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
foldersId	string
updateMask	string (google-fieldmask)

SELECT examples

get_kaj_policy_config

Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder, or project.

SELECT
name,
defaultKeyAccessJustificationPolicy,
defaultPolicyAvailable
FROM google.cloudkms.kaj_policy_config
WHERE foldersId = '{{ foldersId }}' -- required
;

UPDATE examples

update_kaj_policy_config

Updates the KeyAccessJustificationsPolicyConfig for a given organization, folder, or project.

UPDATE google.cloudkms.kaj_policy_config
SET 
data__defaultKeyAccessJustificationPolicy = '{{ defaultKeyAccessJustificationPolicy }}',
data__name = '{{ name }}'
WHERE 
foldersId = '{{ foldersId }}' --required
AND updateMask = '{{ updateMask}}'
RETURNING
name,
defaultKeyAccessJustificationPolicy,
defaultPolicyAvailable;