gcloud kms keys versions describe

NAME

gcloud kms keys versions describe - get metadata for a given version

SYNOPSIS

gcloud kms keys versions describe VERSION [--attestation-file=ATTESTATION_FILE] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

Returns metadata for the given version.

The optional flag attestation-file specifies file to write the attestation object into. The attestation object enables the user to verify the integrity and provenance of the key. See https://cloud.google.com/kms/docs/attest-key for more information about attestations.

EXAMPLES

The following command returns metadata for version 2 within key frodo within the keyring fellowship in the location us-east1:

gcloud kms keys versions describe 2 --key=frodo --keyring=fellowship --location=us-east1

For key versions with protection level HSM, use the --attestation-file flag to save the attestation to a local file.

gcloud kms keys versions describe 2 --key=frodo --keyring=fellowship --location=us-east1 --attestation-file=path/to/attestation.dat

POSITIONAL ARGUMENTS

VERSION

Name of the version to describe.

FLAGS

--attestation-file=ATTESTATION_FILE

Path to the output attestation file.

--key=KEY

The containing key.

--keyring=KEYRING

Key ring of the key.

--location=LOCATION

Location of the keyring.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

These variants are also available:

gcloud alpha kms keys versions describe

gcloud beta kms keys versions describe