- NAME
-
- gcloud kms keys - create and manage keys
- SYNOPSIS
-
-
gcloud kms keysGROUP|COMMAND[GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- A key represents a logical key that can be used for cryptographic operations.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--help.Run
$ gcloud helpfor details. - GROUPS
-
is one of the following:GROUP-
versions - Create and manage versions.
-
- COMMANDS
-
is one of the following:COMMAND-
add-iam-policy-binding - Add IAM policy binding for a kms key.
-
create - Create a new key.
-
delete - Delete a key.
-
describe - Get metadata for a given key.
-
get-iam-policy - Get the IAM policy for a key.
-
list - List the keys within a keyring.
-
remove-iam-policy-binding - Remove IAM policy binding for a kms key.
-
remove-rotation-schedule - Remove the rotation schedule for a key.
-
set-iam-policy - Set the IAM policy for a key.
-
set-primary-version - Set the primary version of a key.
-
set-rotation-schedule - Update the rotation schedule for a key.
-
update - Update a key.
-
- NOTES
- These variants are also available:
gcloud alpha kms keysgcloud beta kms keys
gcloud kms keys
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

