Method: folders.updateAutokeyConfig

Full name: folders.updateAutokeyConfig

Updates the AutokeyConfig for a folder. The caller must have both cloudkms.autokeyConfigs.update permission on the parent folder and cloudkms.cryptoKeys.setIamPolicy permission on the provided key project. A KeyHandle creation in the folder's descendant projects will use this configuration to determine where to create the resulting CryptoKey .

HTTP request


The URLs use gRPC Transcoding syntax.

Path parameters

Parameters
autokeyConfig.name

string

Identifier. Name of the AutokeyConfig resource, e.g. folders/{FOLDER_NUMBER}/autokeyConfig .

Query parameters

Parameters
updateMask

string ( FieldMask format)

Required. Masks which fields of the AutokeyConfig to update, e.g. keyProject .

This is a comma-separated list of fully qualified names of fields. Example: "user.displayName,photo" .

Request body

The request body contains an instance of AutokeyConfig .

Response body

If successful, the response body contains an instance of AutokeyConfig .

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/cloudkms
  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview .

IAM Permissions

Requires the following IAM permission on the name resource:

  • cloudkms.autokeyConfigs.update

For more information, see the IAM documentation .