gcloud alpha compute snapshots update-kms-key

NAME

gcloud alpha compute snapshots update-kms-key - update the KMS key of a Compute Engine snapshot

SYNOPSIS

gcloud alpha compute snapshots update-kms-key SNAPSHOT_NAME [--region=REGION] [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(ALPHA) * gcloud alpha compute snapshots update-kms-key updates the KMS key of a Compute Engine persistent snapshot by rotating it to the primary version of the key or to the primary version of a new KMS key.

EXAMPLES

To update the KMS key of a snapshot named example-snapshot-1, run:

gcloud alpha compute snapshots update-kms-key example-snapshot-1

To update the KMS key of a snapshot named example-snapshot-2 to a new KMS key named example-key in a key ring named example-key-ring in the global scope, run:

gcloud alpha compute snapshots update-kms-key example-snapshot-2 --kms-key example-key --kms-keyring example-key-ring --kms-location global

POSITIONAL ARGUMENTS

SNAPSHOT_NAME

Name of the snapshot to update the KMS key for.

FLAGS

--region=REGION

The region of the snapshot to update.

Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the snapshot. The 'Compute Engine Service Agent' service account must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. The arguments in this group can be used to specify the attributes of this resource.

--kms-key=KMS_KEY

ID of the key or fully qualified identifier for the key.

To set the kms-key attribute:

• provide the argument --kms-key on the command line.

This flag argument must be specified if any of the other arguments in this group are specified.

--kms-keyring=KMS_KEYRING

The KMS keyring of the key.

To set the kms-keyring attribute:

• provide the argument --kms-key on the command line with a fully specified name;
• provide the argument --kms-keyring on the command line.

--kms-location=KMS_LOCATION

The Google Cloud location for the key.

To set the kms-location attribute:

• provide the argument --kms-key on the command line with a fully specified name;
• provide the argument --kms-location on the command line;
• provide the argument --region on the command line.

--kms-project=KMS_PROJECT

The Google Cloud project for the key.

To set the kms-project attribute:

• provide the argument --kms-key on the command line with a fully specified name;
• provide the argument --kms-project on the command line;
• set the property core/project.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist.