@Generated(value="by gapic-generator-java") public class KeyManagementServiceClient extends Object implements BackgroundResource
Manages cryptographic keys and operations using those keys. Implements a REST model with the following objects:
If you are using manual gRPC libraries, see [Using gRPC with Cloud KMS](https://cloud.google.com/kms/docs/grpc).
This class provides the ability to make remote calls to the backing service through method calls that map to API methods. Sample code to get started:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
KeyRingName name = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
KeyRing response = keyManagementServiceClient.getKeyRing(name);
}
Note: close() needs to be called on the KeyManagementServiceClient object to clean up resources such as threads. In the example above, try-with-resources is used, which automatically calls close().
The surface of this class includes several types of Java methods for each of the API's methods:
See the individual methods for example code.
Many parameters require resource names to be formatted in a particular way. To assist with these names, this class includes a format method for each type of name, and additionally a parse method to extract the individual identifiers contained within names that are returned.
This class can be customized by passing in a custom instance of KeyManagementServiceSettings to create(). For example:
To customize credentials:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
KeyManagementServiceSettings keyManagementServiceSettings =
KeyManagementServiceSettings.newBuilder()
.setCredentialsProvider(FixedCredentialsProvider.create(myCredentials))
.build();
KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create(keyManagementServiceSettings);
To customize the endpoint:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
KeyManagementServiceSettings keyManagementServiceSettings =
KeyManagementServiceSettings.newBuilder().setEndpoint(myEndpoint).build();
KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create(keyManagementServiceSettings);
To use REST (HTTP1.1/JSON) transport (instead of gRPC) for sending and receiving requests over the wire:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
KeyManagementServiceSettings keyManagementServiceSettings =
KeyManagementServiceSettings.newBuilder()
.setTransportChannelProvider(
KeyManagementServiceSettings.defaultHttpJsonTransportProviderBuilder().build())
.build();
KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create(keyManagementServiceSettings);
Please refer to the GitHub repository's samples for more quickstart code snippets.
| Modifier and Type | Class and Description |
|---|---|
static class |
KeyManagementServiceClient.ListCryptoKeysFixedSizeCollection |
static class |
KeyManagementServiceClient.ListCryptoKeysPage |
static class |
KeyManagementServiceClient.ListCryptoKeysPagedResponse |
static class |
KeyManagementServiceClient.ListCryptoKeyVersionsFixedSizeCollection |
static class |
KeyManagementServiceClient.ListCryptoKeyVersionsPage |
static class |
KeyManagementServiceClient.ListCryptoKeyVersionsPagedResponse |
static class |
KeyManagementServiceClient.ListImportJobsFixedSizeCollection |
static class |
KeyManagementServiceClient.ListImportJobsPage |
static class |
KeyManagementServiceClient.ListImportJobsPagedResponse |
static class |
KeyManagementServiceClient.ListKeyRingsFixedSizeCollection |
static class |
KeyManagementServiceClient.ListKeyRingsPage |
static class |
KeyManagementServiceClient.ListKeyRingsPagedResponse |
| Modifier | Constructor and Description |
|---|---|
protected |
KeyManagementServiceClient(KeyManagementServiceSettings settings)
Constructs an instance of KeyManagementServiceClient, using the given settings.
|
protected |
KeyManagementServiceClient(KeyManagementServiceStub stub) |
| Modifier and Type | Method and Description |
|---|---|
AsymmetricDecryptResponse |
asymmetricDecrypt(AsymmetricDecryptRequest request)
Decrypts data that was encrypted with a public key retrieved from
[GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey] corresponding to a
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_DECRYPT.
|
AsymmetricDecryptResponse |
asymmetricDecrypt(CryptoKeyVersionName name,
ByteString ciphertext)
Decrypts data that was encrypted with a public key retrieved from
[GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey] corresponding to a
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_DECRYPT.
|
AsymmetricDecryptResponse |
asymmetricDecrypt(String name,
ByteString ciphertext)
Decrypts data that was encrypted with a public key retrieved from
[GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey] corresponding to a
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_DECRYPT.
|
UnaryCallable<AsymmetricDecryptRequest,AsymmetricDecryptResponse> |
asymmetricDecryptCallable()
Decrypts data that was encrypted with a public key retrieved from
[GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey] corresponding to a
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_DECRYPT.
|
AsymmetricSignResponse |
asymmetricSign(AsymmetricSignRequest request)
Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_SIGN, producing a
signature that can be verified with the public key retrieved from
[GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
|
AsymmetricSignResponse |
asymmetricSign(CryptoKeyVersionName name,
Digest digest)
Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_SIGN, producing a
signature that can be verified with the public key retrieved from
[GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
|
AsymmetricSignResponse |
asymmetricSign(String name,
Digest digest)
Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_SIGN, producing a
signature that can be verified with the public key retrieved from
[GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
|
UnaryCallable<AsymmetricSignRequest,AsymmetricSignResponse> |
asymmetricSignCallable()
Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_SIGN, producing a
signature that can be verified with the public key retrieved from
[GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
|
boolean |
awaitTermination(long duration,
TimeUnit unit) |
void |
close() |
static KeyManagementServiceClient |
create()
Constructs an instance of KeyManagementServiceClient with default settings.
|
static KeyManagementServiceClient |
create(KeyManagementServiceSettings settings)
Constructs an instance of KeyManagementServiceClient, using the given settings.
|
static KeyManagementServiceClient |
create(KeyManagementServiceStub stub)
Constructs an instance of KeyManagementServiceClient, using the given stub for making calls.
|
CryptoKey |
createCryptoKey(CreateCryptoKeyRequest request)
Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a
[KeyRing][google.cloud.kms.v1.KeyRing].
|
CryptoKey |
createCryptoKey(KeyRingName parent,
String cryptoKeyId,
CryptoKey cryptoKey)
Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a
[KeyRing][google.cloud.kms.v1.KeyRing].
|
CryptoKey |
createCryptoKey(String parent,
String cryptoKeyId,
CryptoKey cryptoKey)
Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a
[KeyRing][google.cloud.kms.v1.KeyRing].
|
UnaryCallable<CreateCryptoKeyRequest,CryptoKey> |
createCryptoKeyCallable()
Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a
[KeyRing][google.cloud.kms.v1.KeyRing].
|
CryptoKeyVersion |
createCryptoKeyVersion(CreateCryptoKeyVersionRequest request)
Create a new [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a
[CryptoKey][google.cloud.kms.v1.CryptoKey].
|
CryptoKeyVersion |
createCryptoKeyVersion(CryptoKeyName parent,
CryptoKeyVersion cryptoKeyVersion)
Create a new [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a
[CryptoKey][google.cloud.kms.v1.CryptoKey].
|
CryptoKeyVersion |
createCryptoKeyVersion(String parent,
CryptoKeyVersion cryptoKeyVersion)
Create a new [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a
[CryptoKey][google.cloud.kms.v1.CryptoKey].
|
UnaryCallable<CreateCryptoKeyVersionRequest,CryptoKeyVersion> |
createCryptoKeyVersionCallable()
Create a new [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a
[CryptoKey][google.cloud.kms.v1.CryptoKey].
|
ImportJob |
createImportJob(CreateImportJobRequest request)
Create a new [ImportJob][google.cloud.kms.v1.ImportJob] within a
[KeyRing][google.cloud.kms.v1.KeyRing].
|
ImportJob |
createImportJob(KeyRingName parent,
String importJobId,
ImportJob importJob)
Create a new [ImportJob][google.cloud.kms.v1.ImportJob] within a
[KeyRing][google.cloud.kms.v1.KeyRing].
|
ImportJob |
createImportJob(String parent,
String importJobId,
ImportJob importJob)
Create a new [ImportJob][google.cloud.kms.v1.ImportJob] within a
[KeyRing][google.cloud.kms.v1.KeyRing].
|
UnaryCallable<CreateImportJobRequest,ImportJob> |
createImportJobCallable()
Create a new [ImportJob][google.cloud.kms.v1.ImportJob] within a
[KeyRing][google.cloud.kms.v1.KeyRing].
|
KeyRing |
createKeyRing(CreateKeyRingRequest request)
Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given Project and Location.
|
KeyRing |
createKeyRing(LocationName parent,
String keyRingId,
KeyRing keyRing)
Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given Project and Location.
|
KeyRing |
createKeyRing(String parent,
String keyRingId,
KeyRing keyRing)
Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given Project and Location.
|
UnaryCallable<CreateKeyRingRequest,KeyRing> |
createKeyRingCallable()
Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given Project and Location.
|
DecryptResponse |
decrypt(CryptoKeyName name,
ByteString ciphertext)
Decrypts data that was protected by
[Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
|
DecryptResponse |
decrypt(DecryptRequest request)
Decrypts data that was protected by
[Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
|
DecryptResponse |
decrypt(String name,
ByteString ciphertext)
Decrypts data that was protected by
[Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
|
UnaryCallable<DecryptRequest,DecryptResponse> |
decryptCallable()
Decrypts data that was protected by
[Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
|
CryptoKeyVersion |
destroyCryptoKeyVersion(CryptoKeyVersionName name)
Schedule a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for destruction.
|
CryptoKeyVersion |
destroyCryptoKeyVersion(DestroyCryptoKeyVersionRequest request)
Schedule a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for destruction.
|
CryptoKeyVersion |
destroyCryptoKeyVersion(String name)
Schedule a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for destruction.
|
UnaryCallable<DestroyCryptoKeyVersionRequest,CryptoKeyVersion> |
destroyCryptoKeyVersionCallable()
Schedule a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for destruction.
|
EncryptResponse |
encrypt(CryptoKeyPathName name,
ByteString plaintext)
Encrypts data, so that it can only be recovered by a call to
[Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
|
EncryptResponse |
encrypt(EncryptRequest request)
Encrypts data, so that it can only be recovered by a call to
[Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
|
EncryptResponse |
encrypt(com.google.api.resourcenames.ResourceName name,
ByteString plaintext)
Encrypts data, so that it can only be recovered by a call to
[Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
|
EncryptResponse |
encrypt(String name,
ByteString plaintext)
Encrypts data, so that it can only be recovered by a call to
[Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
|
UnaryCallable<EncryptRequest,EncryptResponse> |
encryptCallable()
Encrypts data, so that it can only be recovered by a call to
[Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
|
GenerateRandomBytesResponse |
generateRandomBytes(GenerateRandomBytesRequest request)
Generate random bytes using the Cloud KMS randomness source in the provided location.
|
GenerateRandomBytesResponse |
generateRandomBytes(String location,
int lengthBytes,
ProtectionLevel protectionLevel)
Generate random bytes using the Cloud KMS randomness source in the provided location.
|
UnaryCallable<GenerateRandomBytesRequest,GenerateRandomBytesResponse> |
generateRandomBytesCallable()
Generate random bytes using the Cloud KMS randomness source in the provided location.
|
CryptoKey |
getCryptoKey(CryptoKeyName name)
Returns metadata for a given [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
[primary][google.cloud.kms.v1.CryptoKey.primary]
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
CryptoKey |
getCryptoKey(GetCryptoKeyRequest request)
Returns metadata for a given [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
[primary][google.cloud.kms.v1.CryptoKey.primary]
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
CryptoKey |
getCryptoKey(String name)
Returns metadata for a given [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
[primary][google.cloud.kms.v1.CryptoKey.primary]
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
UnaryCallable<GetCryptoKeyRequest,CryptoKey> |
getCryptoKeyCallable()
Returns metadata for a given [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
[primary][google.cloud.kms.v1.CryptoKey.primary]
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
CryptoKeyVersion |
getCryptoKeyVersion(CryptoKeyVersionName name)
Returns metadata for a given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
CryptoKeyVersion |
getCryptoKeyVersion(GetCryptoKeyVersionRequest request)
Returns metadata for a given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
CryptoKeyVersion |
getCryptoKeyVersion(String name)
Returns metadata for a given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
UnaryCallable<GetCryptoKeyVersionRequest,CryptoKeyVersion> |
getCryptoKeyVersionCallable()
Returns metadata for a given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
com.google.iam.v1.Policy |
getIamPolicy(com.google.iam.v1.GetIamPolicyRequest request)
Gets the access control policy for a resource.
|
com.google.iam.v1.Policy |
getIamPolicy(KeyName resource)
Gets the access control policy for a resource.
|
com.google.iam.v1.Policy |
getIamPolicy(String resource)
Gets the access control policy for a resource.
|
UnaryCallable<com.google.iam.v1.GetIamPolicyRequest,com.google.iam.v1.Policy> |
getIamPolicyCallable()
Gets the access control policy for a resource.
|
ImportJob |
getImportJob(GetImportJobRequest request)
Returns metadata for a given [ImportJob][google.cloud.kms.v1.ImportJob].
|
ImportJob |
getImportJob(ImportJobName name)
Returns metadata for a given [ImportJob][google.cloud.kms.v1.ImportJob].
|
ImportJob |
getImportJob(String name)
Returns metadata for a given [ImportJob][google.cloud.kms.v1.ImportJob].
|
UnaryCallable<GetImportJobRequest,ImportJob> |
getImportJobCallable()
Returns metadata for a given [ImportJob][google.cloud.kms.v1.ImportJob].
|
KeyRing |
getKeyRing(GetKeyRingRequest request)
Returns metadata for a given [KeyRing][google.cloud.kms.v1.KeyRing].
|
KeyRing |
getKeyRing(KeyRingName name)
Returns metadata for a given [KeyRing][google.cloud.kms.v1.KeyRing].
|
KeyRing |
getKeyRing(String name)
Returns metadata for a given [KeyRing][google.cloud.kms.v1.KeyRing].
|
UnaryCallable<GetKeyRingRequest,KeyRing> |
getKeyRingCallable()
Returns metadata for a given [KeyRing][google.cloud.kms.v1.KeyRing].
|
PublicKey |
getPublicKey(CryptoKeyVersionName name)
Returns the public key for the given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
PublicKey |
getPublicKey(GetPublicKeyRequest request)
Returns the public key for the given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
PublicKey |
getPublicKey(String name)
Returns the public key for the given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
UnaryCallable<GetPublicKeyRequest,PublicKey> |
getPublicKeyCallable()
Returns the public key for the given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
KeyManagementServiceSettings |
getSettings() |
KeyManagementServiceStub |
getStub() |
CryptoKeyVersion |
importCryptoKeyVersion(ImportCryptoKeyVersionRequest request)
Import wrapped key material into a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
UnaryCallable<ImportCryptoKeyVersionRequest,CryptoKeyVersion> |
importCryptoKeyVersionCallable()
Import wrapped key material into a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
|
boolean |
isShutdown() |
boolean |
isTerminated() |
KeyManagementServiceClient.ListCryptoKeysPagedResponse |
listCryptoKeys(KeyRingName parent)
Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
|
KeyManagementServiceClient.ListCryptoKeysPagedResponse |
listCryptoKeys(ListCryptoKeysRequest request)
Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
|
KeyManagementServiceClient.ListCryptoKeysPagedResponse |
listCryptoKeys(String parent)
Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
|
UnaryCallable<ListCryptoKeysRequest,ListCryptoKeysResponse> |
listCryptoKeysCallable()
Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
|
UnaryCallable<ListCryptoKeysRequest,KeyManagementServiceClient.ListCryptoKeysPagedResponse> |
listCryptoKeysPagedCallable()
Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
|
KeyManagementServiceClient.ListCryptoKeyVersionsPagedResponse |
listCryptoKeyVersions(CryptoKeyName parent)
Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
|
KeyManagementServiceClient.ListCryptoKeyVersionsPagedResponse |
listCryptoKeyVersions(ListCryptoKeyVersionsRequest request)
Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
|
KeyManagementServiceClient.ListCryptoKeyVersionsPagedResponse |
listCryptoKeyVersions(String parent)
Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
|
UnaryCallable<ListCryptoKeyVersionsRequest,ListCryptoKeyVersionsResponse> |
listCryptoKeyVersionsCallable()
Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
|
UnaryCallable<ListCryptoKeyVersionsRequest,KeyManagementServiceClient.ListCryptoKeyVersionsPagedResponse> |
listCryptoKeyVersionsPagedCallable()
Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
|
KeyManagementServiceClient.ListImportJobsPagedResponse |
listImportJobs(KeyRingName parent)
Lists [ImportJobs][google.cloud.kms.v1.ImportJob].
|
KeyManagementServiceClient.ListImportJobsPagedResponse |
listImportJobs(ListImportJobsRequest request)
Lists [ImportJobs][google.cloud.kms.v1.ImportJob].
|
KeyManagementServiceClient.ListImportJobsPagedResponse |
listImportJobs(String parent)
Lists [ImportJobs][google.cloud.kms.v1.ImportJob].
|
UnaryCallable<ListImportJobsRequest,ListImportJobsResponse> |
listImportJobsCallable()
Lists [ImportJobs][google.cloud.kms.v1.ImportJob].
|
UnaryCallable<ListImportJobsRequest,KeyManagementServiceClient.ListImportJobsPagedResponse> |
listImportJobsPagedCallable()
Lists [ImportJobs][google.cloud.kms.v1.ImportJob].
|
KeyManagementServiceClient.ListKeyRingsPagedResponse |
listKeyRings(ListKeyRingsRequest request)
Lists [KeyRings][google.cloud.kms.v1.KeyRing].
|
KeyManagementServiceClient.ListKeyRingsPagedResponse |
listKeyRings(LocationName parent)
Lists [KeyRings][google.cloud.kms.v1.KeyRing].
|
KeyManagementServiceClient.ListKeyRingsPagedResponse |
listKeyRings(String parent)
Lists [KeyRings][google.cloud.kms.v1.KeyRing].
|
UnaryCallable<ListKeyRingsRequest,ListKeyRingsResponse> |
listKeyRingsCallable()
Lists [KeyRings][google.cloud.kms.v1.KeyRing].
|
UnaryCallable<ListKeyRingsRequest,KeyManagementServiceClient.ListKeyRingsPagedResponse> |
listKeyRingsPagedCallable()
Lists [KeyRings][google.cloud.kms.v1.KeyRing].
|
MacSignResponse |
macSign(CryptoKeyVersionName name,
ByteString data)
Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC, producing a tag that can be
verified by another source with the same key.
|
MacSignResponse |
macSign(MacSignRequest request)
Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC, producing a tag that can be
verified by another source with the same key.
|
MacSignResponse |
macSign(String name,
ByteString data)
Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC, producing a tag that can be
verified by another source with the same key.
|
UnaryCallable<MacSignRequest,MacSignResponse> |
macSignCallable()
Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC, producing a tag that can be
verified by another source with the same key.
|
MacVerifyResponse |
macVerify(CryptoKeyVersionName name,
ByteString data,
ByteString mac)
Verifies MAC tag using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC, and returns a response that
indicates whether or not the verification was successful.
|
MacVerifyResponse |
macVerify(MacVerifyRequest request)
Verifies MAC tag using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC, and returns a response that
indicates whether or not the verification was successful.
|
MacVerifyResponse |
macVerify(String name,
ByteString data,
ByteString mac)
Verifies MAC tag using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC, and returns a response that
indicates whether or not the verification was successful.
|
UnaryCallable<MacVerifyRequest,MacVerifyResponse> |
macVerifyCallable()
Verifies MAC tag using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC, and returns a response that
indicates whether or not the verification was successful.
|
CryptoKeyVersion |
restoreCryptoKeyVersion(CryptoKeyVersionName name)
Restore a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
[DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
state.
|
CryptoKeyVersion |
restoreCryptoKeyVersion(RestoreCryptoKeyVersionRequest request)
Restore a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
[DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
state.
|
CryptoKeyVersion |
restoreCryptoKeyVersion(String name)
Restore a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
[DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
state.
|
UnaryCallable<RestoreCryptoKeyVersionRequest,CryptoKeyVersion> |
restoreCryptoKeyVersionCallable()
Restore a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
[DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
state.
|
com.google.iam.v1.Policy |
setIamPolicy(KeyName resource,
com.google.iam.v1.Policy policy)
Sets the access control policy on the specified resource.
|
com.google.iam.v1.Policy |
setIamPolicy(com.google.iam.v1.SetIamPolicyRequest request)
Sets the access control policy on the specified resource.
|
com.google.iam.v1.Policy |
setIamPolicy(String resource,
com.google.iam.v1.Policy policy)
Sets the access control policy on the specified resource.
|
UnaryCallable<com.google.iam.v1.SetIamPolicyRequest,com.google.iam.v1.Policy> |
setIamPolicyCallable()
Sets the access control policy on the specified resource.
|
void |
shutdown() |
void |
shutdownNow() |
com.google.iam.v1.TestIamPermissionsResponse |
testIamPermissions(KeyName resource,
List<String> permissions)
Returns permissions that a caller has on the specified resource.
|
com.google.iam.v1.TestIamPermissionsResponse |
testIamPermissions(String resource,
List<String> permissions)
Returns permissions that a caller has on the specified resource.
|
com.google.iam.v1.TestIamPermissionsResponse |
testIamPermissions(com.google.iam.v1.TestIamPermissionsRequest request)
Returns permissions that a caller has on the specified resource.
|
UnaryCallable<com.google.iam.v1.TestIamPermissionsRequest,com.google.iam.v1.TestIamPermissionsResponse> |
testIamPermissionsCallable()
Returns permissions that a caller has on the specified resource.
|
CryptoKey |
updateCryptoKey(CryptoKey cryptoKey,
FieldMask updateMask)
Update a [CryptoKey][google.cloud.kms.v1.CryptoKey].
|
CryptoKey |
updateCryptoKey(UpdateCryptoKeyRequest request)
Update a [CryptoKey][google.cloud.kms.v1.CryptoKey].
|
UnaryCallable<UpdateCryptoKeyRequest,CryptoKey> |
updateCryptoKeyCallable()
Update a [CryptoKey][google.cloud.kms.v1.CryptoKey].
|
CryptoKey |
updateCryptoKeyPrimaryVersion(CryptoKeyName name,
String cryptoKeyVersionId)
Update the version of a [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in
[Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
|
CryptoKey |
updateCryptoKeyPrimaryVersion(String name,
String cryptoKeyVersionId)
Update the version of a [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in
[Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
|
CryptoKey |
updateCryptoKeyPrimaryVersion(UpdateCryptoKeyPrimaryVersionRequest request)
Update the version of a [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in
[Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
|
UnaryCallable<UpdateCryptoKeyPrimaryVersionRequest,CryptoKey> |
updateCryptoKeyPrimaryVersionCallable()
Update the version of a [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in
[Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
|
CryptoKeyVersion |
updateCryptoKeyVersion(CryptoKeyVersion cryptoKeyVersion,
FieldMask updateMask)
Update a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s metadata.
|
CryptoKeyVersion |
updateCryptoKeyVersion(UpdateCryptoKeyVersionRequest request)
Update a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s metadata.
|
UnaryCallable<UpdateCryptoKeyVersionRequest,CryptoKeyVersion> |
updateCryptoKeyVersionCallable()
Update a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s metadata.
|
protected KeyManagementServiceClient(KeyManagementServiceSettings settings) throws IOException
IOExceptionprotected KeyManagementServiceClient(KeyManagementServiceStub stub)
public static final KeyManagementServiceClient create() throws IOException
IOExceptionpublic static final KeyManagementServiceClient create(KeyManagementServiceSettings settings) throws IOException
IOExceptionpublic static final KeyManagementServiceClient create(KeyManagementServiceStub stub)
public final KeyManagementServiceSettings getSettings()
public KeyManagementServiceStub getStub()
public final KeyManagementServiceClient.ListKeyRingsPagedResponse listKeyRings(LocationName parent)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
LocationName parent = LocationName.of("[PROJECT]", "[LOCATION]");
for (KeyRing element : keyManagementServiceClient.listKeyRings(parent).iterateAll()) {
// doThingsWith(element);
}
}
parent - Required. The resource name of the location associated with the
[KeyRings][google.cloud.kms.v1.KeyRing], in the format `projects/*/locations/*`.ApiException - if the remote call failspublic final KeyManagementServiceClient.ListKeyRingsPagedResponse listKeyRings(String parent)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String parent = LocationName.of("[PROJECT]", "[LOCATION]").toString();
for (KeyRing element : keyManagementServiceClient.listKeyRings(parent).iterateAll()) {
// doThingsWith(element);
}
}
parent - Required. The resource name of the location associated with the
[KeyRings][google.cloud.kms.v1.KeyRing], in the format `projects/*/locations/*`.ApiException - if the remote call failspublic final KeyManagementServiceClient.ListKeyRingsPagedResponse listKeyRings(ListKeyRingsRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListKeyRingsRequest request =
ListKeyRingsRequest.newBuilder()
.setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
for (KeyRing element : keyManagementServiceClient.listKeyRings(request).iterateAll()) {
// doThingsWith(element);
}
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<ListKeyRingsRequest,KeyManagementServiceClient.ListKeyRingsPagedResponse> listKeyRingsPagedCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListKeyRingsRequest request =
ListKeyRingsRequest.newBuilder()
.setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
ApiFuture<KeyRing> future =
keyManagementServiceClient.listKeyRingsPagedCallable().futureCall(request);
// Do something.
for (KeyRing element : future.get().iterateAll()) {
// doThingsWith(element);
}
}
public final UnaryCallable<ListKeyRingsRequest,ListKeyRingsResponse> listKeyRingsCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListKeyRingsRequest request =
ListKeyRingsRequest.newBuilder()
.setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
while (true) {
ListKeyRingsResponse response =
keyManagementServiceClient.listKeyRingsCallable().call(request);
for (KeyRing element : response.getKeyRingsList()) {
// doThingsWith(element);
}
String nextPageToken = response.getNextPageToken();
if (!Strings.isNullOrEmpty(nextPageToken)) {
request = request.toBuilder().setPageToken(nextPageToken).build();
} else {
break;
}
}
}
public final KeyManagementServiceClient.ListCryptoKeysPagedResponse listCryptoKeys(KeyRingName parent)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
KeyRingName parent = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
for (CryptoKey element : keyManagementServiceClient.listCryptoKeys(parent).iterateAll()) {
// doThingsWith(element);
}
}
parent - Required. The resource name of the [KeyRing][google.cloud.kms.v1.KeyRing] to
list, in the format `projects/*/locations/*/keyRings/*`.ApiException - if the remote call failspublic final KeyManagementServiceClient.ListCryptoKeysPagedResponse listCryptoKeys(String parent)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String parent = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString();
for (CryptoKey element : keyManagementServiceClient.listCryptoKeys(parent).iterateAll()) {
// doThingsWith(element);
}
}
parent - Required. The resource name of the [KeyRing][google.cloud.kms.v1.KeyRing] to
list, in the format `projects/*/locations/*/keyRings/*`.ApiException - if the remote call failspublic final KeyManagementServiceClient.ListCryptoKeysPagedResponse listCryptoKeys(ListCryptoKeysRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListCryptoKeysRequest request =
ListCryptoKeysRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
for (CryptoKey element : keyManagementServiceClient.listCryptoKeys(request).iterateAll()) {
// doThingsWith(element);
}
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<ListCryptoKeysRequest,KeyManagementServiceClient.ListCryptoKeysPagedResponse> listCryptoKeysPagedCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListCryptoKeysRequest request =
ListCryptoKeysRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
ApiFuture<CryptoKey> future =
keyManagementServiceClient.listCryptoKeysPagedCallable().futureCall(request);
// Do something.
for (CryptoKey element : future.get().iterateAll()) {
// doThingsWith(element);
}
}
public final UnaryCallable<ListCryptoKeysRequest,ListCryptoKeysResponse> listCryptoKeysCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListCryptoKeysRequest request =
ListCryptoKeysRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
while (true) {
ListCryptoKeysResponse response =
keyManagementServiceClient.listCryptoKeysCallable().call(request);
for (CryptoKey element : response.getCryptoKeysList()) {
// doThingsWith(element);
}
String nextPageToken = response.getNextPageToken();
if (!Strings.isNullOrEmpty(nextPageToken)) {
request = request.toBuilder().setPageToken(nextPageToken).build();
} else {
break;
}
}
}
public final KeyManagementServiceClient.ListCryptoKeyVersionsPagedResponse listCryptoKeyVersions(CryptoKeyName parent)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyName parent =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]");
for (CryptoKeyVersion element :
keyManagementServiceClient.listCryptoKeyVersions(parent).iterateAll()) {
// doThingsWith(element);
}
}
parent - Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to
list, in the format `projects/*/locations/*/keyRings/*/cryptoKeys/*`.ApiException - if the remote call failspublic final KeyManagementServiceClient.ListCryptoKeyVersionsPagedResponse listCryptoKeyVersions(String parent)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String parent =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]").toString();
for (CryptoKeyVersion element :
keyManagementServiceClient.listCryptoKeyVersions(parent).iterateAll()) {
// doThingsWith(element);
}
}
parent - Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to
list, in the format `projects/*/locations/*/keyRings/*/cryptoKeys/*`.ApiException - if the remote call failspublic final KeyManagementServiceClient.ListCryptoKeyVersionsPagedResponse listCryptoKeyVersions(ListCryptoKeyVersionsRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListCryptoKeyVersionsRequest request =
ListCryptoKeyVersionsRequest.newBuilder()
.setParent(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
for (CryptoKeyVersion element :
keyManagementServiceClient.listCryptoKeyVersions(request).iterateAll()) {
// doThingsWith(element);
}
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<ListCryptoKeyVersionsRequest,KeyManagementServiceClient.ListCryptoKeyVersionsPagedResponse> listCryptoKeyVersionsPagedCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListCryptoKeyVersionsRequest request =
ListCryptoKeyVersionsRequest.newBuilder()
.setParent(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
ApiFuture<CryptoKeyVersion> future =
keyManagementServiceClient.listCryptoKeyVersionsPagedCallable().futureCall(request);
// Do something.
for (CryptoKeyVersion element : future.get().iterateAll()) {
// doThingsWith(element);
}
}
public final UnaryCallable<ListCryptoKeyVersionsRequest,ListCryptoKeyVersionsResponse> listCryptoKeyVersionsCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListCryptoKeyVersionsRequest request =
ListCryptoKeyVersionsRequest.newBuilder()
.setParent(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
while (true) {
ListCryptoKeyVersionsResponse response =
keyManagementServiceClient.listCryptoKeyVersionsCallable().call(request);
for (CryptoKeyVersion element : response.getCryptoKeyVersionsList()) {
// doThingsWith(element);
}
String nextPageToken = response.getNextPageToken();
if (!Strings.isNullOrEmpty(nextPageToken)) {
request = request.toBuilder().setPageToken(nextPageToken).build();
} else {
break;
}
}
}
public final KeyManagementServiceClient.ListImportJobsPagedResponse listImportJobs(KeyRingName parent)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
KeyRingName parent = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
for (ImportJob element : keyManagementServiceClient.listImportJobs(parent).iterateAll()) {
// doThingsWith(element);
}
}
parent - Required. The resource name of the [KeyRing][google.cloud.kms.v1.KeyRing] to
list, in the format `projects/*/locations/*/keyRings/*`.ApiException - if the remote call failspublic final KeyManagementServiceClient.ListImportJobsPagedResponse listImportJobs(String parent)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String parent = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString();
for (ImportJob element : keyManagementServiceClient.listImportJobs(parent).iterateAll()) {
// doThingsWith(element);
}
}
parent - Required. The resource name of the [KeyRing][google.cloud.kms.v1.KeyRing] to
list, in the format `projects/*/locations/*/keyRings/*`.ApiException - if the remote call failspublic final KeyManagementServiceClient.ListImportJobsPagedResponse listImportJobs(ListImportJobsRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListImportJobsRequest request =
ListImportJobsRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
for (ImportJob element : keyManagementServiceClient.listImportJobs(request).iterateAll()) {
// doThingsWith(element);
}
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<ListImportJobsRequest,KeyManagementServiceClient.ListImportJobsPagedResponse> listImportJobsPagedCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListImportJobsRequest request =
ListImportJobsRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
ApiFuture<ImportJob> future =
keyManagementServiceClient.listImportJobsPagedCallable().futureCall(request);
// Do something.
for (ImportJob element : future.get().iterateAll()) {
// doThingsWith(element);
}
}
public final UnaryCallable<ListImportJobsRequest,ListImportJobsResponse> listImportJobsCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ListImportJobsRequest request =
ListImportJobsRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setPageSize(883849137)
.setPageToken("pageToken873572522")
.setFilter("filter-1274492040")
.setOrderBy("orderBy-1207110587")
.build();
while (true) {
ListImportJobsResponse response =
keyManagementServiceClient.listImportJobsCallable().call(request);
for (ImportJob element : response.getImportJobsList()) {
// doThingsWith(element);
}
String nextPageToken = response.getNextPageToken();
if (!Strings.isNullOrEmpty(nextPageToken)) {
request = request.toBuilder().setPageToken(nextPageToken).build();
} else {
break;
}
}
}
public final KeyRing getKeyRing(KeyRingName name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
KeyRingName name = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
KeyRing response = keyManagementServiceClient.getKeyRing(name);
}
name - Required. The [name][google.cloud.kms.v1.KeyRing.name] of the
[KeyRing][google.cloud.kms.v1.KeyRing] to get.ApiException - if the remote call failspublic final KeyRing getKeyRing(String name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString();
KeyRing response = keyManagementServiceClient.getKeyRing(name);
}
name - Required. The [name][google.cloud.kms.v1.KeyRing.name] of the
[KeyRing][google.cloud.kms.v1.KeyRing] to get.ApiException - if the remote call failspublic final KeyRing getKeyRing(GetKeyRingRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetKeyRingRequest request =
GetKeyRingRequest.newBuilder()
.setName(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.build();
KeyRing response = keyManagementServiceClient.getKeyRing(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<GetKeyRingRequest,KeyRing> getKeyRingCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetKeyRingRequest request =
GetKeyRingRequest.newBuilder()
.setName(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.build();
ApiFuture<KeyRing> future =
keyManagementServiceClient.getKeyRingCallable().futureCall(request);
// Do something.
KeyRing response = future.get();
}
public final CryptoKey getCryptoKey(CryptoKeyName name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyName name =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]");
CryptoKey response = keyManagementServiceClient.getCryptoKey(name);
}
name - Required. The [name][google.cloud.kms.v1.CryptoKey.name] of the
[CryptoKey][google.cloud.kms.v1.CryptoKey] to get.ApiException - if the remote call failspublic final CryptoKey getCryptoKey(String name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]").toString();
CryptoKey response = keyManagementServiceClient.getCryptoKey(name);
}
name - Required. The [name][google.cloud.kms.v1.CryptoKey.name] of the
[CryptoKey][google.cloud.kms.v1.CryptoKey] to get.ApiException - if the remote call failspublic final CryptoKey getCryptoKey(GetCryptoKeyRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetCryptoKeyRequest request =
GetCryptoKeyRequest.newBuilder()
.setName(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.build();
CryptoKey response = keyManagementServiceClient.getCryptoKey(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<GetCryptoKeyRequest,CryptoKey> getCryptoKeyCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetCryptoKeyRequest request =
GetCryptoKeyRequest.newBuilder()
.setName(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.build();
ApiFuture<CryptoKey> future =
keyManagementServiceClient.getCryptoKeyCallable().futureCall(request);
// Do something.
CryptoKey response = future.get();
}
public final CryptoKeyVersion getCryptoKeyVersion(CryptoKeyVersionName name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyVersionName name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]");
CryptoKeyVersion response = keyManagementServiceClient.getCryptoKeyVersion(name);
}
name - Required. The [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to get.ApiException - if the remote call failspublic final CryptoKeyVersion getCryptoKeyVersion(String name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]")
.toString();
CryptoKeyVersion response = keyManagementServiceClient.getCryptoKeyVersion(name);
}
name - Required. The [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to get.ApiException - if the remote call failspublic final CryptoKeyVersion getCryptoKeyVersion(GetCryptoKeyVersionRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetCryptoKeyVersionRequest request =
GetCryptoKeyVersionRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.build();
CryptoKeyVersion response = keyManagementServiceClient.getCryptoKeyVersion(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<GetCryptoKeyVersionRequest,CryptoKeyVersion> getCryptoKeyVersionCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetCryptoKeyVersionRequest request =
GetCryptoKeyVersionRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.build();
ApiFuture<CryptoKeyVersion> future =
keyManagementServiceClient.getCryptoKeyVersionCallable().futureCall(request);
// Do something.
CryptoKeyVersion response = future.get();
}
public final PublicKey getPublicKey(CryptoKeyVersionName name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyVersionName name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]");
PublicKey response = keyManagementServiceClient.getPublicKey(name);
}
name - Required. The [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] public key to get.ApiException - if the remote call failspublic final PublicKey getPublicKey(String name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]")
.toString();
PublicKey response = keyManagementServiceClient.getPublicKey(name);
}
name - Required. The [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] public key to get.ApiException - if the remote call failspublic final PublicKey getPublicKey(GetPublicKeyRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetPublicKeyRequest request =
GetPublicKeyRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.build();
PublicKey response = keyManagementServiceClient.getPublicKey(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<GetPublicKeyRequest,PublicKey> getPublicKeyCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetPublicKeyRequest request =
GetPublicKeyRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.build();
ApiFuture<PublicKey> future =
keyManagementServiceClient.getPublicKeyCallable().futureCall(request);
// Do something.
PublicKey response = future.get();
}
public final ImportJob getImportJob(ImportJobName name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ImportJobName name =
ImportJobName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[IMPORT_JOB]");
ImportJob response = keyManagementServiceClient.getImportJob(name);
}
name - Required. The [name][google.cloud.kms.v1.ImportJob.name] of the
[ImportJob][google.cloud.kms.v1.ImportJob] to get.ApiException - if the remote call failspublic final ImportJob getImportJob(String name)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
ImportJobName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[IMPORT_JOB]").toString();
ImportJob response = keyManagementServiceClient.getImportJob(name);
}
name - Required. The [name][google.cloud.kms.v1.ImportJob.name] of the
[ImportJob][google.cloud.kms.v1.ImportJob] to get.ApiException - if the remote call failspublic final ImportJob getImportJob(GetImportJobRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetImportJobRequest request =
GetImportJobRequest.newBuilder()
.setName(
ImportJobName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[IMPORT_JOB]")
.toString())
.build();
ImportJob response = keyManagementServiceClient.getImportJob(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<GetImportJobRequest,ImportJob> getImportJobCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetImportJobRequest request =
GetImportJobRequest.newBuilder()
.setName(
ImportJobName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[IMPORT_JOB]")
.toString())
.build();
ApiFuture<ImportJob> future =
keyManagementServiceClient.getImportJobCallable().futureCall(request);
// Do something.
ImportJob response = future.get();
}
public final KeyRing createKeyRing(LocationName parent, String keyRingId, KeyRing keyRing)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
LocationName parent = LocationName.of("[PROJECT]", "[LOCATION]");
String keyRingId = "keyRingId-2027180374";
KeyRing keyRing = KeyRing.newBuilder().build();
KeyRing response = keyManagementServiceClient.createKeyRing(parent, keyRingId, keyRing);
}
parent - Required. The resource name of the location associated with the
[KeyRings][google.cloud.kms.v1.KeyRing], in the format `projects/*/locations/*`.keyRingId - Required. It must be unique within a location and match the regular expression
`[a-zA-Z0-9_-]{1,63}`keyRing - Required. A [KeyRing][google.cloud.kms.v1.KeyRing] with initial field values.ApiException - if the remote call failspublic final KeyRing createKeyRing(String parent, String keyRingId, KeyRing keyRing)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String parent = LocationName.of("[PROJECT]", "[LOCATION]").toString();
String keyRingId = "keyRingId-2027180374";
KeyRing keyRing = KeyRing.newBuilder().build();
KeyRing response = keyManagementServiceClient.createKeyRing(parent, keyRingId, keyRing);
}
parent - Required. The resource name of the location associated with the
[KeyRings][google.cloud.kms.v1.KeyRing], in the format `projects/*/locations/*`.keyRingId - Required. It must be unique within a location and match the regular expression
`[a-zA-Z0-9_-]{1,63}`keyRing - Required. A [KeyRing][google.cloud.kms.v1.KeyRing] with initial field values.ApiException - if the remote call failspublic final KeyRing createKeyRing(CreateKeyRingRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CreateKeyRingRequest request =
CreateKeyRingRequest.newBuilder()
.setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
.setKeyRingId("keyRingId-2027180374")
.setKeyRing(KeyRing.newBuilder().build())
.build();
KeyRing response = keyManagementServiceClient.createKeyRing(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<CreateKeyRingRequest,KeyRing> createKeyRingCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CreateKeyRingRequest request =
CreateKeyRingRequest.newBuilder()
.setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
.setKeyRingId("keyRingId-2027180374")
.setKeyRing(KeyRing.newBuilder().build())
.build();
ApiFuture<KeyRing> future =
keyManagementServiceClient.createKeyRingCallable().futureCall(request);
// Do something.
KeyRing response = future.get();
}
public final CryptoKey createCryptoKey(KeyRingName parent, String cryptoKeyId, CryptoKey cryptoKey)
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm] are required.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
KeyRingName parent = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
String cryptoKeyId = "cryptoKeyId-1643185255";
CryptoKey cryptoKey = CryptoKey.newBuilder().build();
CryptoKey response =
keyManagementServiceClient.createCryptoKey(parent, cryptoKeyId, cryptoKey);
}
parent - Required. The [name][google.cloud.kms.v1.KeyRing.name] of the KeyRing associated
with the [CryptoKeys][google.cloud.kms.v1.CryptoKey].cryptoKeyId - Required. It must be unique within a KeyRing and match the regular
expression `[a-zA-Z0-9_-]{1,63}`cryptoKey - Required. A [CryptoKey][google.cloud.kms.v1.CryptoKey] with initial field
values.ApiException - if the remote call failspublic final CryptoKey createCryptoKey(String parent, String cryptoKeyId, CryptoKey cryptoKey)
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm] are required.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String parent = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString();
String cryptoKeyId = "cryptoKeyId-1643185255";
CryptoKey cryptoKey = CryptoKey.newBuilder().build();
CryptoKey response =
keyManagementServiceClient.createCryptoKey(parent, cryptoKeyId, cryptoKey);
}
parent - Required. The [name][google.cloud.kms.v1.KeyRing.name] of the KeyRing associated
with the [CryptoKeys][google.cloud.kms.v1.CryptoKey].cryptoKeyId - Required. It must be unique within a KeyRing and match the regular
expression `[a-zA-Z0-9_-]{1,63}`cryptoKey - Required. A [CryptoKey][google.cloud.kms.v1.CryptoKey] with initial field
values.ApiException - if the remote call failspublic final CryptoKey createCryptoKey(CreateCryptoKeyRequest request)
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm] are required.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CreateCryptoKeyRequest request =
CreateCryptoKeyRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setCryptoKeyId("cryptoKeyId-1643185255")
.setCryptoKey(CryptoKey.newBuilder().build())
.setSkipInitialVersionCreation(true)
.build();
CryptoKey response = keyManagementServiceClient.createCryptoKey(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<CreateCryptoKeyRequest,CryptoKey> createCryptoKeyCallable()
[CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm] are required.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CreateCryptoKeyRequest request =
CreateCryptoKeyRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setCryptoKeyId("cryptoKeyId-1643185255")
.setCryptoKey(CryptoKey.newBuilder().build())
.setSkipInitialVersionCreation(true)
.build();
ApiFuture<CryptoKey> future =
keyManagementServiceClient.createCryptoKeyCallable().futureCall(request);
// Do something.
CryptoKey response = future.get();
}
public final CryptoKeyVersion createCryptoKeyVersion(CryptoKeyName parent, CryptoKeyVersion cryptoKeyVersion)
The server will assign the next sequential id. If unset, [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyName parent =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]");
CryptoKeyVersion cryptoKeyVersion = CryptoKeyVersion.newBuilder().build();
CryptoKeyVersion response =
keyManagementServiceClient.createCryptoKeyVersion(parent, cryptoKeyVersion);
}
parent - Required. The [name][google.cloud.kms.v1.CryptoKey.name] of the
[CryptoKey][google.cloud.kms.v1.CryptoKey] associated with the
[CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].cryptoKeyVersion - Required. A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
with initial field values.ApiException - if the remote call failspublic final CryptoKeyVersion createCryptoKeyVersion(String parent, CryptoKeyVersion cryptoKeyVersion)
The server will assign the next sequential id. If unset, [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String parent =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]").toString();
CryptoKeyVersion cryptoKeyVersion = CryptoKeyVersion.newBuilder().build();
CryptoKeyVersion response =
keyManagementServiceClient.createCryptoKeyVersion(parent, cryptoKeyVersion);
}
parent - Required. The [name][google.cloud.kms.v1.CryptoKey.name] of the
[CryptoKey][google.cloud.kms.v1.CryptoKey] associated with the
[CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].cryptoKeyVersion - Required. A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
with initial field values.ApiException - if the remote call failspublic final CryptoKeyVersion createCryptoKeyVersion(CreateCryptoKeyVersionRequest request)
The server will assign the next sequential id. If unset, [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CreateCryptoKeyVersionRequest request =
CreateCryptoKeyVersionRequest.newBuilder()
.setParent(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setCryptoKeyVersion(CryptoKeyVersion.newBuilder().build())
.build();
CryptoKeyVersion response = keyManagementServiceClient.createCryptoKeyVersion(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<CreateCryptoKeyVersionRequest,CryptoKeyVersion> createCryptoKeyVersionCallable()
The server will assign the next sequential id. If unset, [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CreateCryptoKeyVersionRequest request =
CreateCryptoKeyVersionRequest.newBuilder()
.setParent(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setCryptoKeyVersion(CryptoKeyVersion.newBuilder().build())
.build();
ApiFuture<CryptoKeyVersion> future =
keyManagementServiceClient.createCryptoKeyVersionCallable().futureCall(request);
// Do something.
CryptoKeyVersion response = future.get();
}
public final CryptoKeyVersion importCryptoKeyVersion(ImportCryptoKeyVersionRequest request)
All requests must specify a [CryptoKey][google.cloud.kms.v1.CryptoKey]. If a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] is additionally specified in the request, key material will be reimported into that version. Otherwise, a new version will be created, and will be assigned the next sequential id within the [CryptoKey][google.cloud.kms.v1.CryptoKey].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ImportCryptoKeyVersionRequest request =
ImportCryptoKeyVersionRequest.newBuilder()
.setParent(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setCryptoKeyVersion(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setImportJob("importJob-208547368")
.build();
CryptoKeyVersion response = keyManagementServiceClient.importCryptoKeyVersion(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<ImportCryptoKeyVersionRequest,CryptoKeyVersion> importCryptoKeyVersionCallable()
All requests must specify a [CryptoKey][google.cloud.kms.v1.CryptoKey]. If a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] is additionally specified in the request, key material will be reimported into that version. Otherwise, a new version will be created, and will be assigned the next sequential id within the [CryptoKey][google.cloud.kms.v1.CryptoKey].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ImportCryptoKeyVersionRequest request =
ImportCryptoKeyVersionRequest.newBuilder()
.setParent(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setCryptoKeyVersion(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setImportJob("importJob-208547368")
.build();
ApiFuture<CryptoKeyVersion> future =
keyManagementServiceClient.importCryptoKeyVersionCallable().futureCall(request);
// Do something.
CryptoKeyVersion response = future.get();
}
public final ImportJob createImportJob(KeyRingName parent, String importJobId, ImportJob importJob)
[ImportJob.import_method][google.cloud.kms.v1.ImportJob.import_method] is required.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
KeyRingName parent = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
String importJobId = "importJobId1449444627";
ImportJob importJob = ImportJob.newBuilder().build();
ImportJob response =
keyManagementServiceClient.createImportJob(parent, importJobId, importJob);
}
parent - Required. The [name][google.cloud.kms.v1.KeyRing.name] of the
[KeyRing][google.cloud.kms.v1.KeyRing] associated with the
[ImportJobs][google.cloud.kms.v1.ImportJob].importJobId - Required. It must be unique within a KeyRing and match the regular
expression `[a-zA-Z0-9_-]{1,63}`importJob - Required. An [ImportJob][google.cloud.kms.v1.ImportJob] with initial field
values.ApiException - if the remote call failspublic final ImportJob createImportJob(String parent, String importJobId, ImportJob importJob)
[ImportJob.import_method][google.cloud.kms.v1.ImportJob.import_method] is required.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String parent = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString();
String importJobId = "importJobId1449444627";
ImportJob importJob = ImportJob.newBuilder().build();
ImportJob response =
keyManagementServiceClient.createImportJob(parent, importJobId, importJob);
}
parent - Required. The [name][google.cloud.kms.v1.KeyRing.name] of the
[KeyRing][google.cloud.kms.v1.KeyRing] associated with the
[ImportJobs][google.cloud.kms.v1.ImportJob].importJobId - Required. It must be unique within a KeyRing and match the regular
expression `[a-zA-Z0-9_-]{1,63}`importJob - Required. An [ImportJob][google.cloud.kms.v1.ImportJob] with initial field
values.ApiException - if the remote call failspublic final ImportJob createImportJob(CreateImportJobRequest request)
[ImportJob.import_method][google.cloud.kms.v1.ImportJob.import_method] is required.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CreateImportJobRequest request =
CreateImportJobRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setImportJobId("importJobId1449444627")
.setImportJob(ImportJob.newBuilder().build())
.build();
ImportJob response = keyManagementServiceClient.createImportJob(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<CreateImportJobRequest,ImportJob> createImportJobCallable()
[ImportJob.import_method][google.cloud.kms.v1.ImportJob.import_method] is required.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CreateImportJobRequest request =
CreateImportJobRequest.newBuilder()
.setParent(KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]").toString())
.setImportJobId("importJobId1449444627")
.setImportJob(ImportJob.newBuilder().build())
.build();
ApiFuture<ImportJob> future =
keyManagementServiceClient.createImportJobCallable().futureCall(request);
// Do something.
ImportJob response = future.get();
}
public final CryptoKey updateCryptoKey(CryptoKey cryptoKey, FieldMask updateMask)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKey cryptoKey = CryptoKey.newBuilder().build();
FieldMask updateMask = FieldMask.newBuilder().build();
CryptoKey response = keyManagementServiceClient.updateCryptoKey(cryptoKey, updateMask);
}
cryptoKey - Required. [CryptoKey][google.cloud.kms.v1.CryptoKey] with updated values.updateMask - Required. List of fields to be updated in this request.ApiException - if the remote call failspublic final CryptoKey updateCryptoKey(UpdateCryptoKeyRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
UpdateCryptoKeyRequest request =
UpdateCryptoKeyRequest.newBuilder()
.setCryptoKey(CryptoKey.newBuilder().build())
.setUpdateMask(FieldMask.newBuilder().build())
.build();
CryptoKey response = keyManagementServiceClient.updateCryptoKey(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<UpdateCryptoKeyRequest,CryptoKey> updateCryptoKeyCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
UpdateCryptoKeyRequest request =
UpdateCryptoKeyRequest.newBuilder()
.setCryptoKey(CryptoKey.newBuilder().build())
.setUpdateMask(FieldMask.newBuilder().build())
.build();
ApiFuture<CryptoKey> future =
keyManagementServiceClient.updateCryptoKeyCallable().futureCall(request);
// Do something.
CryptoKey response = future.get();
}
public final CryptoKeyVersion updateCryptoKeyVersion(CryptoKeyVersion cryptoKeyVersion, FieldMask updateMask)
[state][google.cloud.kms.v1.CryptoKeyVersion.state] may be changed between [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] and [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED] using this method. See [DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion] and [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] to move between other states.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyVersion cryptoKeyVersion = CryptoKeyVersion.newBuilder().build();
FieldMask updateMask = FieldMask.newBuilder().build();
CryptoKeyVersion response =
keyManagementServiceClient.updateCryptoKeyVersion(cryptoKeyVersion, updateMask);
}
cryptoKeyVersion - Required. [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
updated values.updateMask - Required. List of fields to be updated in this request.ApiException - if the remote call failspublic final CryptoKeyVersion updateCryptoKeyVersion(UpdateCryptoKeyVersionRequest request)
[state][google.cloud.kms.v1.CryptoKeyVersion.state] may be changed between [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] and [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED] using this method. See [DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion] and [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] to move between other states.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
UpdateCryptoKeyVersionRequest request =
UpdateCryptoKeyVersionRequest.newBuilder()
.setCryptoKeyVersion(CryptoKeyVersion.newBuilder().build())
.setUpdateMask(FieldMask.newBuilder().build())
.build();
CryptoKeyVersion response = keyManagementServiceClient.updateCryptoKeyVersion(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<UpdateCryptoKeyVersionRequest,CryptoKeyVersion> updateCryptoKeyVersionCallable()
[state][google.cloud.kms.v1.CryptoKeyVersion.state] may be changed between [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] and [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED] using this method. See [DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion] and [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] to move between other states.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
UpdateCryptoKeyVersionRequest request =
UpdateCryptoKeyVersionRequest.newBuilder()
.setCryptoKeyVersion(CryptoKeyVersion.newBuilder().build())
.setUpdateMask(FieldMask.newBuilder().build())
.build();
ApiFuture<CryptoKeyVersion> future =
keyManagementServiceClient.updateCryptoKeyVersionCallable().futureCall(request);
// Do something.
CryptoKeyVersion response = future.get();
}
public final CryptoKey updateCryptoKeyPrimaryVersion(CryptoKeyName name, String cryptoKeyVersionId)
Returns an error if called on a key whose purpose is not [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyName name =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]");
String cryptoKeyVersionId = "cryptoKeyVersionId987674581";
CryptoKey response =
keyManagementServiceClient.updateCryptoKeyPrimaryVersion(name, cryptoKeyVersionId);
}
name - Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to
update.cryptoKeyVersionId - Required. The id of the child
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use as primary.ApiException - if the remote call failspublic final CryptoKey updateCryptoKeyPrimaryVersion(String name, String cryptoKeyVersionId)
Returns an error if called on a key whose purpose is not [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]").toString();
String cryptoKeyVersionId = "cryptoKeyVersionId987674581";
CryptoKey response =
keyManagementServiceClient.updateCryptoKeyPrimaryVersion(name, cryptoKeyVersionId);
}
name - Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to
update.cryptoKeyVersionId - Required. The id of the child
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use as primary.ApiException - if the remote call failspublic final CryptoKey updateCryptoKeyPrimaryVersion(UpdateCryptoKeyPrimaryVersionRequest request)
Returns an error if called on a key whose purpose is not [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
UpdateCryptoKeyPrimaryVersionRequest request =
UpdateCryptoKeyPrimaryVersionRequest.newBuilder()
.setName(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setCryptoKeyVersionId("cryptoKeyVersionId987674581")
.build();
CryptoKey response = keyManagementServiceClient.updateCryptoKeyPrimaryVersion(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<UpdateCryptoKeyPrimaryVersionRequest,CryptoKey> updateCryptoKeyPrimaryVersionCallable()
Returns an error if called on a key whose purpose is not [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
UpdateCryptoKeyPrimaryVersionRequest request =
UpdateCryptoKeyPrimaryVersionRequest.newBuilder()
.setName(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setCryptoKeyVersionId("cryptoKeyVersionId987674581")
.build();
ApiFuture<CryptoKey> future =
keyManagementServiceClient.updateCryptoKeyPrimaryVersionCallable().futureCall(request);
// Do something.
CryptoKey response = future.get();
}
public final CryptoKeyVersion destroyCryptoKeyVersion(CryptoKeyVersionName name)
Upon calling this method, [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED], and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be set to the time [destroy_scheduled_duration][google.cloud.kms.v1.CryptoKey.destroy_scheduled_duration] in the future. At that time, the [state][google.cloud.kms.v1.CryptoKeyVersion.state] will automatically change to [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED], and the key material will be irrevocably destroyed.
Before the [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] is reached, [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] may be called to reverse the process.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyVersionName name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]");
CryptoKeyVersion response = keyManagementServiceClient.destroyCryptoKeyVersion(name);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to destroy.ApiException - if the remote call failspublic final CryptoKeyVersion destroyCryptoKeyVersion(String name)
Upon calling this method, [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED], and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be set to the time [destroy_scheduled_duration][google.cloud.kms.v1.CryptoKey.destroy_scheduled_duration] in the future. At that time, the [state][google.cloud.kms.v1.CryptoKeyVersion.state] will automatically change to [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED], and the key material will be irrevocably destroyed.
Before the [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] is reached, [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] may be called to reverse the process.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]")
.toString();
CryptoKeyVersion response = keyManagementServiceClient.destroyCryptoKeyVersion(name);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to destroy.ApiException - if the remote call failspublic final CryptoKeyVersion destroyCryptoKeyVersion(DestroyCryptoKeyVersionRequest request)
Upon calling this method, [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED], and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be set to the time [destroy_scheduled_duration][google.cloud.kms.v1.CryptoKey.destroy_scheduled_duration] in the future. At that time, the [state][google.cloud.kms.v1.CryptoKeyVersion.state] will automatically change to [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED], and the key material will be irrevocably destroyed.
Before the [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] is reached, [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] may be called to reverse the process.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
DestroyCryptoKeyVersionRequest request =
DestroyCryptoKeyVersionRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.build();
CryptoKeyVersion response = keyManagementServiceClient.destroyCryptoKeyVersion(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<DestroyCryptoKeyVersionRequest,CryptoKeyVersion> destroyCryptoKeyVersionCallable()
Upon calling this method, [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED], and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be set to the time [destroy_scheduled_duration][google.cloud.kms.v1.CryptoKey.destroy_scheduled_duration] in the future. At that time, the [state][google.cloud.kms.v1.CryptoKeyVersion.state] will automatically change to [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED], and the key material will be irrevocably destroyed.
Before the [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] is reached, [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] may be called to reverse the process.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
DestroyCryptoKeyVersionRequest request =
DestroyCryptoKeyVersionRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.build();
ApiFuture<CryptoKeyVersion> future =
keyManagementServiceClient.destroyCryptoKeyVersionCallable().futureCall(request);
// Do something.
CryptoKeyVersion response = future.get();
}
public final CryptoKeyVersion restoreCryptoKeyVersion(CryptoKeyVersionName name)
Upon restoration of the CryptoKeyVersion, [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED], and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be cleared.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyVersionName name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]");
CryptoKeyVersion response = keyManagementServiceClient.restoreCryptoKeyVersion(name);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to restore.ApiException - if the remote call failspublic final CryptoKeyVersion restoreCryptoKeyVersion(String name)
Upon restoration of the CryptoKeyVersion, [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED], and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be cleared.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]")
.toString();
CryptoKeyVersion response = keyManagementServiceClient.restoreCryptoKeyVersion(name);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to restore.ApiException - if the remote call failspublic final CryptoKeyVersion restoreCryptoKeyVersion(RestoreCryptoKeyVersionRequest request)
Upon restoration of the CryptoKeyVersion, [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED], and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be cleared.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
RestoreCryptoKeyVersionRequest request =
RestoreCryptoKeyVersionRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.build();
CryptoKeyVersion response = keyManagementServiceClient.restoreCryptoKeyVersion(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<RestoreCryptoKeyVersionRequest,CryptoKeyVersion> restoreCryptoKeyVersionCallable()
Upon restoration of the CryptoKeyVersion, [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED], and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be cleared.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
RestoreCryptoKeyVersionRequest request =
RestoreCryptoKeyVersionRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.build();
ApiFuture<CryptoKeyVersion> future =
keyManagementServiceClient.restoreCryptoKeyVersionCallable().futureCall(request);
// Do something.
CryptoKeyVersion response = future.get();
}
public final EncryptResponse encrypt(com.google.api.resourcenames.ResourceName name, ByteString plaintext)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
ResourceName name = CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]");
ByteString plaintext = ByteString.EMPTY;
EncryptResponse response = keyManagementServiceClient.encrypt(name, plaintext);
}
name - Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] or
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for encryption.
If a [CryptoKey][google.cloud.kms.v1.CryptoKey] is specified, the server will use its [primary version][google.cloud.kms.v1.CryptoKey.primary].
plaintext - Required. The data to encrypt. Must be no larger than 64KiB.
The maximum size depends on the key version's [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level]. For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the plaintext must be no larger than 64KiB. For [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of the plaintext and additional_authenticated_data fields must be no larger than 8KiB.
ApiException - if the remote call failspublic final EncryptResponse encrypt(CryptoKeyPathName name, ByteString plaintext)
Sample code:
try (KeyManagementServiceClient keyManagementServiceClient = KeyManagementServiceClient.create()) {
CryptoKeyPathName name = CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]");
ByteString plaintext = ByteString.copyFromUtf8("");
EncryptResponse response = keyManagementServiceClient.encrypt(name, plaintext);
}
name - Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] or
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for encryption.
If a [CryptoKey][google.cloud.kms.v1.CryptoKey] is specified, the server will use its [primary version][google.cloud.kms.v1.CryptoKey.primary].
plaintext - Required. The data to encrypt. Must be no larger than 64KiB.
The maximum size depends on the key version's [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level]. For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the plaintext must be no larger than 64KiB. For [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of the plaintext and additional_authenticated_data fields must be no larger than 8KiB.
ApiException - if the remote call failspublic final EncryptResponse encrypt(String name, ByteString plaintext)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]").toString();
ByteString plaintext = ByteString.EMPTY;
EncryptResponse response = keyManagementServiceClient.encrypt(name, plaintext);
}
name - Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] or
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for encryption.
If a [CryptoKey][google.cloud.kms.v1.CryptoKey] is specified, the server will use its [primary version][google.cloud.kms.v1.CryptoKey.primary].
plaintext - Required. The data to encrypt. Must be no larger than 64KiB.
The maximum size depends on the key version's [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level]. For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the plaintext must be no larger than 64KiB. For [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of the plaintext and additional_authenticated_data fields must be no larger than 8KiB.
ApiException - if the remote call failspublic final EncryptResponse encrypt(EncryptRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
EncryptRequest request =
EncryptRequest.newBuilder()
.setName(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setPlaintext(ByteString.EMPTY)
.setAdditionalAuthenticatedData(ByteString.EMPTY)
.setPlaintextCrc32C(Int64Value.newBuilder().build())
.setAdditionalAuthenticatedDataCrc32C(Int64Value.newBuilder().build())
.build();
EncryptResponse response = keyManagementServiceClient.encrypt(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<EncryptRequest,EncryptResponse> encryptCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
EncryptRequest request =
EncryptRequest.newBuilder()
.setName(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setPlaintext(ByteString.EMPTY)
.setAdditionalAuthenticatedData(ByteString.EMPTY)
.setPlaintextCrc32C(Int64Value.newBuilder().build())
.setAdditionalAuthenticatedDataCrc32C(Int64Value.newBuilder().build())
.build();
ApiFuture<EncryptResponse> future =
keyManagementServiceClient.encryptCallable().futureCall(request);
// Do something.
EncryptResponse response = future.get();
}
public final DecryptResponse decrypt(CryptoKeyName name, ByteString ciphertext)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyName name =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]");
ByteString ciphertext = ByteString.EMPTY;
DecryptResponse response = keyManagementServiceClient.decrypt(name, ciphertext);
}
name - Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to
use for decryption. The server will choose the appropriate version.ciphertext - Required. The encrypted data originally returned in
[EncryptResponse.ciphertext][google.cloud.kms.v1.EncryptResponse.ciphertext].ApiException - if the remote call failspublic final DecryptResponse decrypt(String name, ByteString ciphertext)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]").toString();
ByteString ciphertext = ByteString.EMPTY;
DecryptResponse response = keyManagementServiceClient.decrypt(name, ciphertext);
}
name - Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to
use for decryption. The server will choose the appropriate version.ciphertext - Required. The encrypted data originally returned in
[EncryptResponse.ciphertext][google.cloud.kms.v1.EncryptResponse.ciphertext].ApiException - if the remote call failspublic final DecryptResponse decrypt(DecryptRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
DecryptRequest request =
DecryptRequest.newBuilder()
.setName(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setCiphertext(ByteString.EMPTY)
.setAdditionalAuthenticatedData(ByteString.EMPTY)
.setCiphertextCrc32C(Int64Value.newBuilder().build())
.setAdditionalAuthenticatedDataCrc32C(Int64Value.newBuilder().build())
.build();
DecryptResponse response = keyManagementServiceClient.decrypt(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<DecryptRequest,DecryptResponse> decryptCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
DecryptRequest request =
DecryptRequest.newBuilder()
.setName(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setCiphertext(ByteString.EMPTY)
.setAdditionalAuthenticatedData(ByteString.EMPTY)
.setCiphertextCrc32C(Int64Value.newBuilder().build())
.setAdditionalAuthenticatedDataCrc32C(Int64Value.newBuilder().build())
.build();
ApiFuture<DecryptResponse> future =
keyManagementServiceClient.decryptCallable().futureCall(request);
// Do something.
DecryptResponse response = future.get();
}
public final AsymmetricSignResponse asymmetricSign(CryptoKeyVersionName name, Digest digest)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyVersionName name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]");
Digest digest = Digest.newBuilder().build();
AsymmetricSignResponse response = keyManagementServiceClient.asymmetricSign(name, digest);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for signing.digest - Optional. The digest of the data to sign. The digest must be produced with the
same digest algorithm as specified by the key version's
[algorithm][google.cloud.kms.v1.CryptoKeyVersion.algorithm].
This field may not be supplied if [AsymmetricSignRequest.data][google.cloud.kms.v1.AsymmetricSignRequest.data] is supplied.
ApiException - if the remote call failspublic final AsymmetricSignResponse asymmetricSign(String name, Digest digest)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]")
.toString();
Digest digest = Digest.newBuilder().build();
AsymmetricSignResponse response = keyManagementServiceClient.asymmetricSign(name, digest);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for signing.digest - Optional. The digest of the data to sign. The digest must be produced with the
same digest algorithm as specified by the key version's
[algorithm][google.cloud.kms.v1.CryptoKeyVersion.algorithm].
This field may not be supplied if [AsymmetricSignRequest.data][google.cloud.kms.v1.AsymmetricSignRequest.data] is supplied.
ApiException - if the remote call failspublic final AsymmetricSignResponse asymmetricSign(AsymmetricSignRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
AsymmetricSignRequest request =
AsymmetricSignRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setDigest(Digest.newBuilder().build())
.setDigestCrc32C(Int64Value.newBuilder().build())
.setData(ByteString.EMPTY)
.setDataCrc32C(Int64Value.newBuilder().build())
.build();
AsymmetricSignResponse response = keyManagementServiceClient.asymmetricSign(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<AsymmetricSignRequest,AsymmetricSignResponse> asymmetricSignCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
AsymmetricSignRequest request =
AsymmetricSignRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setDigest(Digest.newBuilder().build())
.setDigestCrc32C(Int64Value.newBuilder().build())
.setData(ByteString.EMPTY)
.setDataCrc32C(Int64Value.newBuilder().build())
.build();
ApiFuture<AsymmetricSignResponse> future =
keyManagementServiceClient.asymmetricSignCallable().futureCall(request);
// Do something.
AsymmetricSignResponse response = future.get();
}
public final AsymmetricDecryptResponse asymmetricDecrypt(CryptoKeyVersionName name, ByteString ciphertext)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyVersionName name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]");
ByteString ciphertext = ByteString.EMPTY;
AsymmetricDecryptResponse response =
keyManagementServiceClient.asymmetricDecrypt(name, ciphertext);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for decryption.ciphertext - Required. The data encrypted with the named
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s public key using OAEP.ApiException - if the remote call failspublic final AsymmetricDecryptResponse asymmetricDecrypt(String name, ByteString ciphertext)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]")
.toString();
ByteString ciphertext = ByteString.EMPTY;
AsymmetricDecryptResponse response =
keyManagementServiceClient.asymmetricDecrypt(name, ciphertext);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for decryption.ciphertext - Required. The data encrypted with the named
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s public key using OAEP.ApiException - if the remote call failspublic final AsymmetricDecryptResponse asymmetricDecrypt(AsymmetricDecryptRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
AsymmetricDecryptRequest request =
AsymmetricDecryptRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setCiphertext(ByteString.EMPTY)
.setCiphertextCrc32C(Int64Value.newBuilder().build())
.build();
AsymmetricDecryptResponse response = keyManagementServiceClient.asymmetricDecrypt(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<AsymmetricDecryptRequest,AsymmetricDecryptResponse> asymmetricDecryptCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
AsymmetricDecryptRequest request =
AsymmetricDecryptRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setCiphertext(ByteString.EMPTY)
.setCiphertextCrc32C(Int64Value.newBuilder().build())
.build();
ApiFuture<AsymmetricDecryptResponse> future =
keyManagementServiceClient.asymmetricDecryptCallable().futureCall(request);
// Do something.
AsymmetricDecryptResponse response = future.get();
}
public final MacSignResponse macSign(CryptoKeyVersionName name, ByteString data)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyVersionName name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]");
ByteString data = ByteString.EMPTY;
MacSignResponse response = keyManagementServiceClient.macSign(name, data);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for signing.data - Required. The data to sign. The MAC tag is computed over this data field based on
the specific algorithm.ApiException - if the remote call failspublic final MacSignResponse macSign(String name, ByteString data)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]")
.toString();
ByteString data = ByteString.EMPTY;
MacSignResponse response = keyManagementServiceClient.macSign(name, data);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for signing.data - Required. The data to sign. The MAC tag is computed over this data field based on
the specific algorithm.ApiException - if the remote call failspublic final MacSignResponse macSign(MacSignRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
MacSignRequest request =
MacSignRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setData(ByteString.EMPTY)
.setDataCrc32C(Int64Value.newBuilder().build())
.build();
MacSignResponse response = keyManagementServiceClient.macSign(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<MacSignRequest,MacSignResponse> macSignCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
MacSignRequest request =
MacSignRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setData(ByteString.EMPTY)
.setDataCrc32C(Int64Value.newBuilder().build())
.build();
ApiFuture<MacSignResponse> future =
keyManagementServiceClient.macSignCallable().futureCall(request);
// Do something.
MacSignResponse response = future.get();
}
public final MacVerifyResponse macVerify(CryptoKeyVersionName name, ByteString data, ByteString mac)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
CryptoKeyVersionName name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]");
ByteString data = ByteString.EMPTY;
ByteString mac = ByteString.EMPTY;
MacVerifyResponse response = keyManagementServiceClient.macVerify(name, data, mac);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for verification.data - Required. The data used previously as a
[MacSignRequest.data][google.cloud.kms.v1.MacSignRequest.data] to generate the MAC tag.mac - Required. The signature to verify.ApiException - if the remote call failspublic final MacVerifyResponse macVerify(String name, ByteString data, ByteString mac)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String name =
CryptoKeyVersionName.of(
"[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]")
.toString();
ByteString data = ByteString.EMPTY;
ByteString mac = ByteString.EMPTY;
MacVerifyResponse response = keyManagementServiceClient.macVerify(name, data, mac);
}
name - Required. The resource name of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for verification.data - Required. The data used previously as a
[MacSignRequest.data][google.cloud.kms.v1.MacSignRequest.data] to generate the MAC tag.mac - Required. The signature to verify.ApiException - if the remote call failspublic final MacVerifyResponse macVerify(MacVerifyRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
MacVerifyRequest request =
MacVerifyRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setData(ByteString.EMPTY)
.setDataCrc32C(Int64Value.newBuilder().build())
.setMac(ByteString.EMPTY)
.setMacCrc32C(Int64Value.newBuilder().build())
.build();
MacVerifyResponse response = keyManagementServiceClient.macVerify(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<MacVerifyRequest,MacVerifyResponse> macVerifyCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
MacVerifyRequest request =
MacVerifyRequest.newBuilder()
.setName(
CryptoKeyVersionName.of(
"[PROJECT]",
"[LOCATION]",
"[KEY_RING]",
"[CRYPTO_KEY]",
"[CRYPTO_KEY_VERSION]")
.toString())
.setData(ByteString.EMPTY)
.setDataCrc32C(Int64Value.newBuilder().build())
.setMac(ByteString.EMPTY)
.setMacCrc32C(Int64Value.newBuilder().build())
.build();
ApiFuture<MacVerifyResponse> future =
keyManagementServiceClient.macVerifyCallable().futureCall(request);
// Do something.
MacVerifyResponse response = future.get();
}
public final GenerateRandomBytesResponse generateRandomBytes(String location, int lengthBytes, ProtectionLevel protectionLevel)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
String location = "location1901043637";
int lengthBytes = -745661998;
ProtectionLevel protectionLevel = ProtectionLevel.forNumber(0);
GenerateRandomBytesResponse response =
keyManagementServiceClient.generateRandomBytes(location, lengthBytes, protectionLevel);
}
location - The project-specific location in which to generate random bytes. For example,
"projects/my-project/locations/us-central1".lengthBytes - The length in bytes of the amount of randomness to retrieve. Minimum 8
bytes, maximum 1024 bytes.protectionLevel - The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] to use when
generating the random data. Currently, only [HSM][google.cloud.kms.v1.ProtectionLevel.HSM]
protection level is supported.ApiException - if the remote call failspublic final GenerateRandomBytesResponse generateRandomBytes(GenerateRandomBytesRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GenerateRandomBytesRequest request =
GenerateRandomBytesRequest.newBuilder()
.setLocation("location1901043637")
.setLengthBytes(-745661998)
.setProtectionLevel(ProtectionLevel.forNumber(0))
.build();
GenerateRandomBytesResponse response =
keyManagementServiceClient.generateRandomBytes(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final UnaryCallable<GenerateRandomBytesRequest,GenerateRandomBytesResponse> generateRandomBytesCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GenerateRandomBytesRequest request =
GenerateRandomBytesRequest.newBuilder()
.setLocation("location1901043637")
.setLengthBytes(-745661998)
.setProtectionLevel(ProtectionLevel.forNumber(0))
.build();
ApiFuture<GenerateRandomBytesResponse> future =
keyManagementServiceClient.generateRandomBytesCallable().futureCall(request);
// Do something.
GenerateRandomBytesResponse response = future.get();
}
public final com.google.iam.v1.Policy setIamPolicy(com.google.iam.v1.SetIamPolicyRequest request)
Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED`errors.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
SetIamPolicyRequest request =
SetIamPolicyRequest.newBuilder()
.setResource(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setPolicy(Policy.newBuilder().build())
.setUpdateMask(FieldMask.newBuilder().build())
.build();
Policy response = keyManagementServiceClient.setIamPolicy(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final com.google.iam.v1.Policy setIamPolicy(KeyName resource, com.google.iam.v1.Policy policy)
Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
Sample code:
try (KeyManagementServiceClient keyManagementServiceClient = KeyManagementServiceClient.create()) {
KeyName resource = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
Policy policy = Policy.newBuilder().build();
Policy response = keyManagementServiceClient.setIamPolicy(resource, policy);
}
resource - REQUIRED: The resource for which the policy is being specified. See the
operation documentation for the appropriate value for this field.policy - REQUIRED: The complete policy to be applied to the `resource`. The size of the
policy is limited to a few 10s of KB. An empty policy is a valid policy but certain Cloud
Platform services (such as Projects) might reject them.ApiException - if the remote call failspublic final com.google.iam.v1.Policy setIamPolicy(String resource, com.google.iam.v1.Policy policy)
Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
Sample code:
try (KeyManagementServiceClient keyManagementServiceClient = KeyManagementServiceClient.create()) {
KeyName resource = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
Policy policy = Policy.newBuilder().build();
Policy response = keyManagementServiceClient.setIamPolicy(resource.toString(), policy);
}
resource - REQUIRED: The resource for which the policy is being specified. See the
operation documentation for the appropriate value for this field.policy - REQUIRED: The complete policy to be applied to the `resource`. The size of the
policy is limited to a few 10s of KB. An empty policy is a valid policy but certain Cloud
Platform services (such as Projects) might reject them.ApiException - if the remote call failspublic final UnaryCallable<com.google.iam.v1.SetIamPolicyRequest,com.google.iam.v1.Policy> setIamPolicyCallable()
Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED`errors.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
SetIamPolicyRequest request =
SetIamPolicyRequest.newBuilder()
.setResource(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setPolicy(Policy.newBuilder().build())
.setUpdateMask(FieldMask.newBuilder().build())
.build();
ApiFuture<Policy> future =
keyManagementServiceClient.setIamPolicyCallable().futureCall(request);
// Do something.
Policy response = future.get();
}
public final com.google.iam.v1.Policy getIamPolicy(com.google.iam.v1.GetIamPolicyRequest request)
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetIamPolicyRequest request =
GetIamPolicyRequest.newBuilder()
.setResource(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setOptions(GetPolicyOptions.newBuilder().build())
.build();
Policy response = keyManagementServiceClient.getIamPolicy(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final com.google.iam.v1.Policy getIamPolicy(KeyName resource)
Sample code:
try (KeyManagementServiceClient keyManagementServiceClient = KeyManagementServiceClient.create()) {
KeyName resource = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
Policy response = keyManagementServiceClient.getIamPolicy(resource);
}
resource - REQUIRED: The resource for which the policy is being requested. See the
operation documentation for the appropriate value for this field.ApiException - if the remote call failspublic final com.google.iam.v1.Policy getIamPolicy(String resource)
Sample code:
try (KeyManagementServiceClient keyManagementServiceClient = KeyManagementServiceClient.create()) {
KeyName resource = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
Policy response = keyManagementServiceClient.getIamPolicy(resource.toString());
}
resource - REQUIRED: The resource for which the policy is being requested. See the
operation documentation for the appropriate value for this field.ApiException - if the remote call failspublic final UnaryCallable<com.google.iam.v1.GetIamPolicyRequest,com.google.iam.v1.Policy> getIamPolicyCallable()
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
GetIamPolicyRequest request =
GetIamPolicyRequest.newBuilder()
.setResource(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.setOptions(GetPolicyOptions.newBuilder().build())
.build();
ApiFuture<Policy> future =
keyManagementServiceClient.getIamPolicyCallable().futureCall(request);
// Do something.
Policy response = future.get();
}
public final com.google.iam.v1.TestIamPermissionsResponse testIamPermissions(com.google.iam.v1.TestIamPermissionsRequest request)
Note: This operation is designed to be used for buildingpermission-aware UIs and command-line tools, not for authorizationchecking. This operation may "fail open" without warning.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
TestIamPermissionsRequest request =
TestIamPermissionsRequest.newBuilder()
.setResource(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.addAllPermissions(new ArrayList<String>())
.build();
TestIamPermissionsResponse response = keyManagementServiceClient.testIamPermissions(request);
}
request - The request object containing all of the parameters for the API call.ApiException - if the remote call failspublic final com.google.iam.v1.TestIamPermissionsResponse testIamPermissions(KeyName resource, List<String> permissions)
Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.
Sample code:
try (KeyManagementServiceClient keyManagementServiceClient = KeyManagementServiceClient.create()) {
KeyName resource = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
List<String> permissions = new ArrayList<>();
TestIamPermissionsResponse response = keyManagementServiceClient.testIamPermissions(resource, permissions);
}
resource - REQUIRED: The resource for which the policy detail is being requested. See the
operation documentation for the appropriate value for this field.permissions - The set of permissions to check for the `resource`. Permissions with
wildcards (such as '*' or 'storage.*') are not allowed. For more information see
[IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).ApiException - if the remote call failspublic final com.google.iam.v1.TestIamPermissionsResponse testIamPermissions(String resource, List<String> permissions)
Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.
Sample code:
try (KeyManagementServiceClient keyManagementServiceClient = KeyManagementServiceClient.create()) {
KeyName resource = KeyRingName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]");
List<String> permissions = new ArrayList<>();
TestIamPermissionsResponse response = keyManagementServiceClient.testIamPermissions(resource.toString(), permissions);
}
resource - REQUIRED: The resource for which the policy detail is being requested. See the
operation documentation for the appropriate value for this field.permissions - The set of permissions to check for the `resource`. Permissions with
wildcards (such as '*' or 'storage.*') are not allowed. For more information see
[IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).ApiException - if the remote call failspublic final UnaryCallable<com.google.iam.v1.TestIamPermissionsRequest,com.google.iam.v1.TestIamPermissionsResponse> testIamPermissionsCallable()
Note: This operation is designed to be used for buildingpermission-aware UIs and command-line tools, not for authorizationchecking. This operation may "fail open" without warning.
Sample code:
// This snippet has been automatically generated and should be regarded as a code template only.
// It will require modifications to work:
// - It may require correct/in-range values for request initialization.
// - It may require specifying regional endpoints when creating the service client as shown in
// https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
try (KeyManagementServiceClient keyManagementServiceClient =
KeyManagementServiceClient.create()) {
TestIamPermissionsRequest request =
TestIamPermissionsRequest.newBuilder()
.setResource(
CryptoKeyName.of("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]")
.toString())
.addAllPermissions(new ArrayList<String>())
.build();
ApiFuture<TestIamPermissionsResponse> future =
keyManagementServiceClient.testIamPermissionsCallable().futureCall(request);
// Do something.
TestIamPermissionsResponse response = future.get();
}
public final void close()
close in interface AutoCloseablepublic void shutdown()
shutdown in interface BackgroundResourcepublic boolean isShutdown()
isShutdown in interface BackgroundResourcepublic boolean isTerminated()
isTerminated in interface BackgroundResourcepublic void shutdownNow()
shutdownNow in interface BackgroundResourcepublic boolean awaitTermination(long duration,
TimeUnit unit)
throws InterruptedException
awaitTermination in interface BackgroundResourceInterruptedExceptionCopyright © 2022 Google LLC. All rights reserved.