1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. kms
  5. getCryptoKeyIamPolicy
Google Cloud v8.26.0 published on Thursday, Apr 10, 2025 by Pulumi

gcp.kms.getCryptoKeyIamPolicy

Explore with Pulumi AI

Google Cloud v8.26.0 published on Thursday, Apr 10, 2025 by Pulumi

Retrieves the current IAM policy data for a Google Cloud KMS crypto key.

example

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const foo = gcp.kms.getCryptoKeyIamPolicy({
    cryptoKeyId: cryptoKey.id,
});
Copy
import pulumi
import pulumi_gcp as gcp

foo = gcp.kms.get_crypto_key_iam_policy(crypto_key_id=crypto_key["id"])
Copy
package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := kms.GetCryptoKeyIamPolicy(ctx, &kms.GetCryptoKeyIamPolicyArgs{
			CryptoKeyId: cryptoKey.Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var foo = Gcp.Kms.GetCryptoKeyIamPolicy.Invoke(new()
    {
        CryptoKeyId = cryptoKey.Id,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.kms.KmsFunctions;
import com.pulumi.gcp.kms.inputs.GetCryptoKeyIamPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var foo = KmsFunctions.getCryptoKeyIamPolicy(GetCryptoKeyIamPolicyArgs.builder()
            .cryptoKeyId(cryptoKey.id())
            .build());

    }
}
Copy
variables:
  foo:
    fn::invoke:
      function: gcp:kms:getCryptoKeyIamPolicy
      arguments:
        cryptoKeyId: ${cryptoKey.id}
Copy

Using getCryptoKeyIamPolicy

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getCryptoKeyIamPolicy(args: GetCryptoKeyIamPolicyArgs, opts?: InvokeOptions): Promise<GetCryptoKeyIamPolicyResult>
function getCryptoKeyIamPolicyOutput(args: GetCryptoKeyIamPolicyOutputArgs, opts?: InvokeOptions): Output<GetCryptoKeyIamPolicyResult>
Copy
def get_crypto_key_iam_policy(crypto_key_id: Optional[str] = None,
                              opts: Optional[InvokeOptions] = None) -> GetCryptoKeyIamPolicyResult
def get_crypto_key_iam_policy_output(crypto_key_id: Optional[pulumi.Input[str]] = None,
                              opts: Optional[InvokeOptions] = None) -> Output[GetCryptoKeyIamPolicyResult]
Copy
func GetCryptoKeyIamPolicy(ctx *Context, args *GetCryptoKeyIamPolicyArgs, opts ...InvokeOption) (*GetCryptoKeyIamPolicyResult, error)
func GetCryptoKeyIamPolicyOutput(ctx *Context, args *GetCryptoKeyIamPolicyOutputArgs, opts ...InvokeOption) GetCryptoKeyIamPolicyResultOutput
Copy

> Note: This function is named GetCryptoKeyIamPolicy in the Go SDK.

public static class GetCryptoKeyIamPolicy 
{
    public static Task<GetCryptoKeyIamPolicyResult> InvokeAsync(GetCryptoKeyIamPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetCryptoKeyIamPolicyResult> Invoke(GetCryptoKeyIamPolicyInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetCryptoKeyIamPolicyResult> getCryptoKeyIamPolicy(GetCryptoKeyIamPolicyArgs args, InvokeOptions options)
public static Output<GetCryptoKeyIamPolicyResult> getCryptoKeyIamPolicy(GetCryptoKeyIamPolicyArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: gcp:kms/getCryptoKeyIamPolicy:getCryptoKeyIamPolicy
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

CryptoKeyId
This property is required.
Changes to this property will trigger replacement.
string
The crypto key ID, in the form
CryptoKeyId
This property is required.
Changes to this property will trigger replacement.
string
The crypto key ID, in the form
cryptoKeyId
This property is required.
Changes to this property will trigger replacement.
String
The crypto key ID, in the form
cryptoKeyId
This property is required.
Changes to this property will trigger replacement.
string
The crypto key ID, in the form
crypto_key_id
This property is required.
Changes to this property will trigger replacement.
str
The crypto key ID, in the form
cryptoKeyId
This property is required.
Changes to this property will trigger replacement.
String
The crypto key ID, in the form

getCryptoKeyIamPolicy Result

The following output properties are available:

CryptoKeyId string
Etag string
(Computed) The etag of the IAM policy.
Id string
The provider-assigned unique ID for this managed resource.
PolicyData string
(Computed) The policy data
CryptoKeyId string
Etag string
(Computed) The etag of the IAM policy.
Id string
The provider-assigned unique ID for this managed resource.
PolicyData string
(Computed) The policy data
cryptoKeyId String
etag String
(Computed) The etag of the IAM policy.
id String
The provider-assigned unique ID for this managed resource.
policyData String
(Computed) The policy data
cryptoKeyId string
etag string
(Computed) The etag of the IAM policy.
id string
The provider-assigned unique ID for this managed resource.
policyData string
(Computed) The policy data
crypto_key_id str
etag str
(Computed) The etag of the IAM policy.
id str
The provider-assigned unique ID for this managed resource.
policy_data str
(Computed) The policy data
cryptoKeyId String
etag String
(Computed) The etag of the IAM policy.
id String
The provider-assigned unique ID for this managed resource.
policyData String
(Computed) The policy data

Package Details

Repository
Google Cloud (GCP) Classic pulumi/pulumi-gcp
License
Apache-2.0
Notes
This Pulumi package is based on the google-beta Terraform Provider.
Google Cloud v8.26.0 published on Thursday, Apr 10, 2025 by Pulumi