Class LoggingFolderBucketConfigCmekSettings.Builder

    • Constructor Detail

      • Builder

        public Builder()
    • Method Detail

      • kmsKeyName

        @Stability(Stable)
        public LoggingFolderBucketConfigCmekSettings.Builder kmsKeyName​(String kmsKeyName)
        Parameters:
        kmsKeyName - The resource name for the configured Cloud KMS key. This parameter is required. KMS key name format: "projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]" To enable CMEK for the bucket, set this field to a valid kmsKeyName for which the associated service account has the required cloudkms.cryptoKeyEncrypterDecrypter roles assigned for the key. The Cloud KMS key used by the bucket can be updated by changing the kmsKeyName to a new valid key name. Encryption operations that are in progress will be completed with the key that was in use when they started. Decryption operations will be completed using the key that was used at the time of encryption unless access to that key has been revoked. See [Enabling CMEK for Logging Buckets](https://cloud.google.com/logging/docs/routing/managed-encryption-storage) for more information. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/logging_folder_bucket_config#kms_key_name LoggingFolderBucketConfig#kms_key_name}
        Returns:
        this