- NAME
-
- gcloud kms ekm-config update - update the EkmConfig
- SYNOPSIS
-
-
gcloud kms ekm-config update--location=LOCATION[--default-ekm-connection=DEFAULT_EKM_CONNECTION] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- gcloud kms ekm-config update can be used to update the EkmConfig. Applies to all
CryptoKeys and CryptoKeyVersions with a
protection levelofexternal vpc. - EXAMPLES
- The following command sets the default ekm-connection to
laplacefor its projectfooand locationus-east1:gcloud kms ekm-config update --location = us-east1 --default-ekm-connection = "projects/foo/locations/us-east1/ekmConnections/laplace"The following command removes the default-ekm-connection in
us-east1for the current project:gcloud kms ekm-config update --location = us-east1 --default-ekm-connection = "" - REQUIRED FLAGS
-
- Location resource - The KMS location resource. This represents a Cloud resource.
(NOTE) Some attributes are not given arguments in this group but can be set in
other ways.
To set the
projectattribute:- provide the argument
--locationon the command line with a fully specified name; - set the property
core/project.
This must be specified.
-
--location=LOCATION - ID of the location or fully qualified identifier for the location.
To set the
locationattribute:- provide the argument
--locationon the command line.
- provide the argument
- provide the argument
- Location resource - The KMS location resource. This represents a Cloud resource.
(NOTE) Some attributes are not given arguments in this group but can be set in
other ways.
- OPTIONAL FLAGS
-
-
--default-ekm-connection=DEFAULT_EKM_CONNECTION - The resource name of the EkmConnection to be used as the default EkmConnection
for all
external-vpcCryptoKeys in a project and location. Can be an empty string to remove the default EkmConnection.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
- These variants are also available:
gcloud alpha kms ekm-config updategcloud beta kms ekm-config update
gcloud kms ekm-config update
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.
