gcloud alpha kms keys GROUP | COMMAND [GCLOUD_WIDE_FLAG …]
(ALPHA) A key represents a logical key that can be used for
cryptographic operations.
--help.
Run $ gcloud help for details.
is one of the following:
GROUP is one of the following:
COMMAND
add-iam-policy-binding(ALPHA) Add IAM policy binding for a kms key.
create(ALPHA) Create a new key.
delete(ALPHA) Delete a key.
describe(ALPHA) Get metadata for a given key.
get-iam-policy(ALPHA) Get the IAM policy for a key.
list(ALPHA) List the keys within a keyring.
remove-iam-policy-binding(ALPHA) Remove IAM policy binding for a kms key.
remove-rotation-schedule(ALPHA) Remove the rotation schedule for a key.
set-iam-policy(ALPHA) Set the IAM policy for a key.
set-primary-version(ALPHA) Set the primary version of a key.
set-rotation-schedule(ALPHA) Update the rotation schedule for a key.
update(ALPHA) Update a key.
gcloud kms keysgcloud beta kms keys
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.