Class KeyAccessJustificationsPolicy (3.13.0)

KeyAccessJustificationsPolicy(
    mapping=None, *, ignore_unknown_fields=False, **kwargs
)

A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason values for encrypt, decrypt, and sign operations on a CryptoKey or KeyAccessJustificationsPolicyConfig (the default Key Access Justifications policy).

Attribute

Name Description
allowed_access_reasons MutableSequence[google.cloud.kms_v1.types.AccessReason]
The list of allowed reasons for access to a CryptoKey. Note that empty allowed_access_reasons has a different meaning depending on where this message appears. If this is under KeyAccessJustificationsPolicyConfig, it means allow-all. If this is under CryptoKey, it means deny-all.