# Functions

# Constants

View and manage your keys and secrets stored in Cloud Key Management Service.
See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account.

# Structs

AsymmetricDecryptRequest: Request message for KeyManagementService.AsymmetricDecrypt.
AsymmetricDecryptResponse: Response message for KeyManagementService.AsymmetricDecrypt.
AsymmetricSignRequest: Request message for KeyManagementService.AsymmetricSign.
AsymmetricSignResponse: Response message for KeyManagementService.AsymmetricSign.
AuditConfig: Specifies the audit configuration for a service.
AuditLogConfig: Provides the configuration for logging a type of permissions.
AutokeyConfig: Cloud KMS Autokey configuration for a folder.
Binding: Associates `members`, or principals, with a `role`.
Certificate: A Certificate represents an X.509 certificate used to authenticate HTTPS connections to EKM replicas.
CertificateChains: Certificate chains needed to verify the attestation.
ChecksummedData: Data with integrity verification field.
CryptoKey: A CryptoKey represents a logical key that can be used for cryptographic operations.
CryptoKeyVersion: A CryptoKeyVersion represents an individual cryptographic key, and the associated key material.
CryptoKeyVersionTemplate: A CryptoKeyVersionTemplate specifies the properties to use when creating a new CryptoKeyVersion, either manually with CreateCryptoKeyVersion or automatically as a result of auto-rotation.
DecryptRequest: Request message for KeyManagementService.Decrypt.
DecryptResponse: Response message for KeyManagementService.Decrypt.
DestroyCryptoKeyVersionRequest: Request message for KeyManagementService.DestroyCryptoKeyVersion.
Digest: A Digest holds a cryptographic message digest.
EkmConfig: An EkmConfig is a singleton resource that represents configuration parameters that apply to all CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC in a given project and location.
EkmConnection: An EkmConnection represents an individual EKM connection.
EncryptRequest: Request message for KeyManagementService.Encrypt.
EncryptResponse: Response message for KeyManagementService.Encrypt.
Expr: Represents a textual expression in the Common Expression Language (CEL) syntax.
ExternalProtectionLevelOptions: ExternalProtectionLevelOptions stores a group of additional fields for configuring a CryptoKeyVersion that are specific to the EXTERNAL protection level and EXTERNAL_VPC protection levels.
GenerateRandomBytesRequest: Request message for KeyManagementService.GenerateRandomBytes.
GenerateRandomBytesResponse: Response message for KeyManagementService.GenerateRandomBytes.
ImportCryptoKeyVersionRequest: Request message for KeyManagementService.ImportCryptoKeyVersion.
ImportJob: An ImportJob can be used to create CryptoKeys and CryptoKeyVersions using pre-existing key material, generated outside of Cloud KMS.
KeyAccessJustificationsPolicy: A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason values for encrypt, decrypt, and sign operations on a CryptoKey.
KeyHandle: Resource-oriented representation of a request to Cloud KMS Autokey and the resulting provisioning of a CryptoKey.
KeyOperationAttestation: Contains an HSM-generated attestation about a key operation.
KeyRing: A KeyRing is a toplevel logical grouping of CryptoKeys.
ListCryptoKeysResponse: Response message for KeyManagementService.ListCryptoKeys.
ListCryptoKeyVersionsResponse: Response message for KeyManagementService.ListCryptoKeyVersions.
ListEkmConnectionsResponse: Response message for EkmService.ListEkmConnections.
ListImportJobsResponse: Response message for KeyManagementService.ListImportJobs.
ListKeyHandlesResponse: Response message for Autokey.ListKeyHandles.
ListKeyRingsResponse: Response message for KeyManagementService.ListKeyRings.
ListLocationsResponse: The response message for Locations.ListLocations.
Location: A resource that represents a Google Cloud location.
LocationMetadata: Cloud KMS metadata for the given google.cloud.location.Location.
MacSignRequest: Request message for KeyManagementService.MacSign.
MacSignResponse: Response message for KeyManagementService.MacSign.
MacVerifyRequest: Request message for KeyManagementService.MacVerify.
MacVerifyResponse: Response message for KeyManagementService.MacVerify.
Operation: This resource represents a long-running operation that is the result of a network API call.
Policy: An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources.
PublicKey: The public keys for a given CryptoKeyVersion.
RawDecryptRequest: Request message for KeyManagementService.RawDecrypt.
RawDecryptResponse: Response message for KeyManagementService.RawDecrypt.
RawEncryptRequest: Request message for KeyManagementService.RawEncrypt.
RawEncryptResponse: Response message for KeyManagementService.RawEncrypt.
RestoreCryptoKeyVersionRequest: Request message for KeyManagementService.RestoreCryptoKeyVersion.
ServiceResolver: A ServiceResolver represents an EKM replica that can be reached within an EkmConnection.
SetIamPolicyRequest: Request message for `SetIamPolicy` method.
ShowEffectiveAutokeyConfigResponse: Response message for ShowEffectiveAutokeyConfig.
Status: The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs.
TestIamPermissionsRequest: Request message for `TestIamPermissions` method.
TestIamPermissionsResponse: Response message for `TestIamPermissions` method.
UpdateCryptoKeyPrimaryVersionRequest: Request message for KeyManagementService.UpdateCryptoKeyPrimaryVersion.
VerifyConnectivityResponse: Response message for EkmService.VerifyConnectivity.
WrappingPublicKey: The public key component of the wrapping key.