Google Cloud v8.21.0 published on Wednesday, Mar 5, 2025 by Pulumi
gcp.compute.getDisk
Explore with Pulumi AI
Get information about a Google Compute Persistent disks.
the official documentation and its API.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const persistent_boot_disk = gcp.compute.getDisk({
    name: "persistent-boot-disk",
    project: "example",
});
const _default = new gcp.compute.Instance("default", {bootDisk: {
    source: persistent_boot_disk.then(persistent_boot_disk => persistent_boot_disk.selfLink),
    autoDelete: false,
}});
import pulumi
import pulumi_gcp as gcp
persistent_boot_disk = gcp.compute.get_disk(name="persistent-boot-disk",
    project="example")
default = gcp.compute.Instance("default", boot_disk={
    "source": persistent_boot_disk.self_link,
    "auto_delete": False,
})
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		persistent_boot_disk, err := compute.LookupDisk(ctx, &compute.LookupDiskArgs{
			Name:    "persistent-boot-disk",
			Project: pulumi.StringRef("example"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = compute.NewInstance(ctx, "default", &compute.InstanceArgs{
			BootDisk: &compute.InstanceBootDiskArgs{
				Source:     pulumi.String(persistent_boot_disk.SelfLink),
				AutoDelete: pulumi.Bool(false),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() => 
{
    var persistent_boot_disk = Gcp.Compute.GetDisk.Invoke(new()
    {
        Name = "persistent-boot-disk",
        Project = "example",
    });
    var @default = new Gcp.Compute.Instance("default", new()
    {
        BootDisk = new Gcp.Compute.Inputs.InstanceBootDiskArgs
        {
            Source = persistent_boot_disk.Apply(persistent_boot_disk => persistent_boot_disk.Apply(getDiskResult => getDiskResult.SelfLink)),
            AutoDelete = false,
        },
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.ComputeFunctions;
import com.pulumi.gcp.compute.inputs.GetDiskArgs;
import com.pulumi.gcp.compute.Instance;
import com.pulumi.gcp.compute.InstanceArgs;
import com.pulumi.gcp.compute.inputs.InstanceBootDiskArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var persistent-boot-disk = ComputeFunctions.getDisk(GetDiskArgs.builder()
            .name("persistent-boot-disk")
            .project("example")
            .build());
        var default_ = new Instance("default", InstanceArgs.builder()
            .bootDisk(InstanceBootDiskArgs.builder()
                .source(persistent_boot_disk.selfLink())
                .autoDelete(false)
                .build())
            .build());
    }
}
resources:
  default:
    type: gcp:compute:Instance
    properties:
      bootDisk:
        source: ${["persistent-boot-disk"].selfLink}
        autoDelete: false
variables:
  persistent-boot-disk:
    fn::invoke:
      function: gcp:compute:getDisk
      arguments:
        name: persistent-boot-disk
        project: example
Using getDisk
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getDisk(args: GetDiskArgs, opts?: InvokeOptions): Promise<GetDiskResult>
function getDiskOutput(args: GetDiskOutputArgs, opts?: InvokeOptions): Output<GetDiskResult>def get_disk(name: Optional[str] = None,
             project: Optional[str] = None,
             zone: Optional[str] = None,
             opts: Optional[InvokeOptions] = None) -> GetDiskResult
def get_disk_output(name: Optional[pulumi.Input[str]] = None,
             project: Optional[pulumi.Input[str]] = None,
             zone: Optional[pulumi.Input[str]] = None,
             opts: Optional[InvokeOptions] = None) -> Output[GetDiskResult]func LookupDisk(ctx *Context, args *LookupDiskArgs, opts ...InvokeOption) (*LookupDiskResult, error)
func LookupDiskOutput(ctx *Context, args *LookupDiskOutputArgs, opts ...InvokeOption) LookupDiskResultOutput> Note: This function is named LookupDisk in the Go SDK.
public static class GetDisk 
{
    public static Task<GetDiskResult> InvokeAsync(GetDiskArgs args, InvokeOptions? opts = null)
    public static Output<GetDiskResult> Invoke(GetDiskInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetDiskResult> getDisk(GetDiskArgs args, InvokeOptions options)
public static Output<GetDiskResult> getDisk(GetDiskArgs args, InvokeOptions options)
fn::invoke:
  function: gcp:compute/getDisk:getDisk
  arguments:
    # arguments dictionaryThe following arguments are supported:
getDisk Result
The following output properties are available:
- AccessMode string
- Architecture string
- AsyncPrimary List<GetDisks Disk Async Primary Disk> 
- CreationTimestamp string
- Creation timestamp in RFC3339 text format.
- Description string
- The optional description of this resource.
- DiskEncryption List<GetKeys Disk Disk Encryption Key> 
- DiskId string
- EffectiveLabels Dictionary<string, string>
- EnableConfidential boolCompute 
- GuestOs List<GetFeatures Disk Guest Os Feature> 
- Id string
- The provider-assigned unique ID for this managed resource.
- Image string
- The image from which to initialize this disk.
- Interface string
- LabelFingerprint string
- The fingerprint used for optimistic locking of this resource. Used internally during updates.
- Labels Dictionary<string, string>
- All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- LastAttach stringTimestamp 
- Last attach timestamp in RFC3339 text format.
- LastDetach stringTimestamp 
- Last detach timestamp in RFC3339 text format.
- Licenses List<string>
- MultiWriter bool
- Name string
- Params
List<GetDisk Param> 
- PhysicalBlock intSize Bytes 
- Physical block size of the persistent disk, in bytes.
- ProvisionedIops int
- ProvisionedThroughput int
- PulumiLabels Dictionary<string, string>
- ResourcePolicies List<string>
- SelfLink string
- The URI of the created resource.
- Size int
- Size of the persistent disk, specified in GB.
- Snapshot string
- The source snapshot used to create this disk.
- SourceDisk string
- SourceDisk stringId 
- SourceImage List<GetEncryption Keys Disk Source Image Encryption Key> 
- The customer-supplied encryption key of the source image.
- SourceImage stringId 
- The ID value of the image used to create this disk. This value identifies the exact image that was used to create this persistent disk. For example, if you created the persistent disk from an image that was later deleted and recreated under the same name, the source image ID would identify the exact version of the image that was used.
- SourceInstant stringSnapshot 
- SourceInstant stringSnapshot Id 
- SourceSnapshot List<GetEncryption Keys Disk Source Snapshot Encryption Key> 
- The customer-supplied encryption key of the source snapshot.
- SourceSnapshot stringId 
- The unique ID of the snapshot used to create this disk. This value identifies the exact snapshot that was used to create this persistent disk. For example, if you created the persistent disk from a snapshot that was later deleted and recreated under the same name, the source snapshot ID would identify the exact version of the snapshot that was used.
- SourceStorage stringObject 
- StoragePool string
- Type string
- URL of the disk type resource describing which disk type to use to create the disk.
- Users List<string>
- Links to the users of the disk (attached instances) in form: project/zones/zone/instances/instance
- Project string
- Zone string
- A reference to the zone where the disk resides.
- AccessMode string
- Architecture string
- AsyncPrimary []GetDisks Disk Async Primary Disk 
- CreationTimestamp string
- Creation timestamp in RFC3339 text format.
- Description string
- The optional description of this resource.
- DiskEncryption []GetKeys Disk Disk Encryption Key 
- DiskId string
- EffectiveLabels map[string]string
- EnableConfidential boolCompute 
- GuestOs []GetFeatures Disk Guest Os Feature 
- Id string
- The provider-assigned unique ID for this managed resource.
- Image string
- The image from which to initialize this disk.
- Interface string
- LabelFingerprint string
- The fingerprint used for optimistic locking of this resource. Used internally during updates.
- Labels map[string]string
- All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- LastAttach stringTimestamp 
- Last attach timestamp in RFC3339 text format.
- LastDetach stringTimestamp 
- Last detach timestamp in RFC3339 text format.
- Licenses []string
- MultiWriter bool
- Name string
- Params
[]GetDisk Param 
- PhysicalBlock intSize Bytes 
- Physical block size of the persistent disk, in bytes.
- ProvisionedIops int
- ProvisionedThroughput int
- PulumiLabels map[string]string
- ResourcePolicies []string
- SelfLink string
- The URI of the created resource.
- Size int
- Size of the persistent disk, specified in GB.
- Snapshot string
- The source snapshot used to create this disk.
- SourceDisk string
- SourceDisk stringId 
- SourceImage []GetEncryption Keys Disk Source Image Encryption Key 
- The customer-supplied encryption key of the source image.
- SourceImage stringId 
- The ID value of the image used to create this disk. This value identifies the exact image that was used to create this persistent disk. For example, if you created the persistent disk from an image that was later deleted and recreated under the same name, the source image ID would identify the exact version of the image that was used.
- SourceInstant stringSnapshot 
- SourceInstant stringSnapshot Id 
- SourceSnapshot []GetEncryption Keys Disk Source Snapshot Encryption Key 
- The customer-supplied encryption key of the source snapshot.
- SourceSnapshot stringId 
- The unique ID of the snapshot used to create this disk. This value identifies the exact snapshot that was used to create this persistent disk. For example, if you created the persistent disk from a snapshot that was later deleted and recreated under the same name, the source snapshot ID would identify the exact version of the snapshot that was used.
- SourceStorage stringObject 
- StoragePool string
- Type string
- URL of the disk type resource describing which disk type to use to create the disk.
- Users []string
- Links to the users of the disk (attached instances) in form: project/zones/zone/instances/instance
- Project string
- Zone string
- A reference to the zone where the disk resides.
- accessMode String
- architecture String
- asyncPrimary List<GetDisks Disk Async Primary Disk> 
- creationTimestamp String
- Creation timestamp in RFC3339 text format.
- description String
- The optional description of this resource.
- diskEncryption List<GetKeys Disk Disk Encryption Key> 
- diskId String
- effectiveLabels Map<String,String>
- enableConfidential BooleanCompute 
- guestOs List<GetFeatures Disk Guest Os Feature> 
- id String
- The provider-assigned unique ID for this managed resource.
- image String
- The image from which to initialize this disk.
- interface_ String
- labelFingerprint String
- The fingerprint used for optimistic locking of this resource. Used internally during updates.
- labels Map<String,String>
- All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- lastAttach StringTimestamp 
- Last attach timestamp in RFC3339 text format.
- lastDetach StringTimestamp 
- Last detach timestamp in RFC3339 text format.
- licenses List<String>
- multiWriter Boolean
- name String
- params
List<GetDisk Param> 
- physicalBlock IntegerSize Bytes 
- Physical block size of the persistent disk, in bytes.
- provisionedIops Integer
- provisionedThroughput Integer
- pulumiLabels Map<String,String>
- resourcePolicies List<String>
- selfLink String
- The URI of the created resource.
- size Integer
- Size of the persistent disk, specified in GB.
- snapshot String
- The source snapshot used to create this disk.
- sourceDisk String
- sourceDisk StringId 
- sourceImage List<GetEncryption Keys Disk Source Image Encryption Key> 
- The customer-supplied encryption key of the source image.
- sourceImage StringId 
- The ID value of the image used to create this disk. This value identifies the exact image that was used to create this persistent disk. For example, if you created the persistent disk from an image that was later deleted and recreated under the same name, the source image ID would identify the exact version of the image that was used.
- sourceInstant StringSnapshot 
- sourceInstant StringSnapshot Id 
- sourceSnapshot List<GetEncryption Keys Disk Source Snapshot Encryption Key> 
- The customer-supplied encryption key of the source snapshot.
- sourceSnapshot StringId 
- The unique ID of the snapshot used to create this disk. This value identifies the exact snapshot that was used to create this persistent disk. For example, if you created the persistent disk from a snapshot that was later deleted and recreated under the same name, the source snapshot ID would identify the exact version of the snapshot that was used.
- sourceStorage StringObject 
- storagePool String
- type String
- URL of the disk type resource describing which disk type to use to create the disk.
- users List<String>
- Links to the users of the disk (attached instances) in form: project/zones/zone/instances/instance
- project String
- zone String
- A reference to the zone where the disk resides.
- accessMode string
- architecture string
- asyncPrimary GetDisks Disk Async Primary Disk[] 
- creationTimestamp string
- Creation timestamp in RFC3339 text format.
- description string
- The optional description of this resource.
- diskEncryption GetKeys Disk Disk Encryption Key[] 
- diskId string
- effectiveLabels {[key: string]: string}
- enableConfidential booleanCompute 
- guestOs GetFeatures Disk Guest Os Feature[] 
- id string
- The provider-assigned unique ID for this managed resource.
- image string
- The image from which to initialize this disk.
- interface string
- labelFingerprint string
- The fingerprint used for optimistic locking of this resource. Used internally during updates.
- labels {[key: string]: string}
- All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- lastAttach stringTimestamp 
- Last attach timestamp in RFC3339 text format.
- lastDetach stringTimestamp 
- Last detach timestamp in RFC3339 text format.
- licenses string[]
- multiWriter boolean
- name string
- params
GetDisk Param[] 
- physicalBlock numberSize Bytes 
- Physical block size of the persistent disk, in bytes.
- provisionedIops number
- provisionedThroughput number
- pulumiLabels {[key: string]: string}
- resourcePolicies string[]
- selfLink string
- The URI of the created resource.
- size number
- Size of the persistent disk, specified in GB.
- snapshot string
- The source snapshot used to create this disk.
- sourceDisk string
- sourceDisk stringId 
- sourceImage GetEncryption Keys Disk Source Image Encryption Key[] 
- The customer-supplied encryption key of the source image.
- sourceImage stringId 
- The ID value of the image used to create this disk. This value identifies the exact image that was used to create this persistent disk. For example, if you created the persistent disk from an image that was later deleted and recreated under the same name, the source image ID would identify the exact version of the image that was used.
- sourceInstant stringSnapshot 
- sourceInstant stringSnapshot Id 
- sourceSnapshot GetEncryption Keys Disk Source Snapshot Encryption Key[] 
- The customer-supplied encryption key of the source snapshot.
- sourceSnapshot stringId 
- The unique ID of the snapshot used to create this disk. This value identifies the exact snapshot that was used to create this persistent disk. For example, if you created the persistent disk from a snapshot that was later deleted and recreated under the same name, the source snapshot ID would identify the exact version of the snapshot that was used.
- sourceStorage stringObject 
- storagePool string
- type string
- URL of the disk type resource describing which disk type to use to create the disk.
- users string[]
- Links to the users of the disk (attached instances) in form: project/zones/zone/instances/instance
- project string
- zone string
- A reference to the zone where the disk resides.
- access_mode str
- architecture str
- async_primary_ Sequence[Getdisks Disk Async Primary Disk] 
- creation_timestamp str
- Creation timestamp in RFC3339 text format.
- description str
- The optional description of this resource.
- disk_encryption_ Sequence[Getkeys Disk Disk Encryption Key] 
- disk_id str
- effective_labels Mapping[str, str]
- enable_confidential_ boolcompute 
- guest_os_ Sequence[Getfeatures Disk Guest Os Feature] 
- id str
- The provider-assigned unique ID for this managed resource.
- image str
- The image from which to initialize this disk.
- interface str
- label_fingerprint str
- The fingerprint used for optimistic locking of this resource. Used internally during updates.
- labels Mapping[str, str]
- All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- last_attach_ strtimestamp 
- Last attach timestamp in RFC3339 text format.
- last_detach_ strtimestamp 
- Last detach timestamp in RFC3339 text format.
- licenses Sequence[str]
- multi_writer bool
- name str
- params
Sequence[GetDisk Param] 
- physical_block_ intsize_ bytes 
- Physical block size of the persistent disk, in bytes.
- provisioned_iops int
- provisioned_throughput int
- pulumi_labels Mapping[str, str]
- resource_policies Sequence[str]
- self_link str
- The URI of the created resource.
- size int
- Size of the persistent disk, specified in GB.
- snapshot str
- The source snapshot used to create this disk.
- source_disk str
- source_disk_ strid 
- source_image_ Sequence[Getencryption_ keys Disk Source Image Encryption Key] 
- The customer-supplied encryption key of the source image.
- source_image_ strid 
- The ID value of the image used to create this disk. This value identifies the exact image that was used to create this persistent disk. For example, if you created the persistent disk from an image that was later deleted and recreated under the same name, the source image ID would identify the exact version of the image that was used.
- source_instant_ strsnapshot 
- source_instant_ strsnapshot_ id 
- source_snapshot_ Sequence[Getencryption_ keys Disk Source Snapshot Encryption Key] 
- The customer-supplied encryption key of the source snapshot.
- source_snapshot_ strid 
- The unique ID of the snapshot used to create this disk. This value identifies the exact snapshot that was used to create this persistent disk. For example, if you created the persistent disk from a snapshot that was later deleted and recreated under the same name, the source snapshot ID would identify the exact version of the snapshot that was used.
- source_storage_ strobject 
- storage_pool str
- type str
- URL of the disk type resource describing which disk type to use to create the disk.
- users Sequence[str]
- Links to the users of the disk (attached instances) in form: project/zones/zone/instances/instance
- project str
- zone str
- A reference to the zone where the disk resides.
- accessMode String
- architecture String
- asyncPrimary List<Property Map>Disks 
- creationTimestamp String
- Creation timestamp in RFC3339 text format.
- description String
- The optional description of this resource.
- diskEncryption List<Property Map>Keys 
- diskId String
- effectiveLabels Map<String>
- enableConfidential BooleanCompute 
- guestOs List<Property Map>Features 
- id String
- The provider-assigned unique ID for this managed resource.
- image String
- The image from which to initialize this disk.
- interface String
- labelFingerprint String
- The fingerprint used for optimistic locking of this resource. Used internally during updates.
- labels Map<String>
- All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- lastAttach StringTimestamp 
- Last attach timestamp in RFC3339 text format.
- lastDetach StringTimestamp 
- Last detach timestamp in RFC3339 text format.
- licenses List<String>
- multiWriter Boolean
- name String
- params List<Property Map>
- physicalBlock NumberSize Bytes 
- Physical block size of the persistent disk, in bytes.
- provisionedIops Number
- provisionedThroughput Number
- pulumiLabels Map<String>
- resourcePolicies List<String>
- selfLink String
- The URI of the created resource.
- size Number
- Size of the persistent disk, specified in GB.
- snapshot String
- The source snapshot used to create this disk.
- sourceDisk String
- sourceDisk StringId 
- sourceImage List<Property Map>Encryption Keys 
- The customer-supplied encryption key of the source image.
- sourceImage StringId 
- The ID value of the image used to create this disk. This value identifies the exact image that was used to create this persistent disk. For example, if you created the persistent disk from an image that was later deleted and recreated under the same name, the source image ID would identify the exact version of the image that was used.
- sourceInstant StringSnapshot 
- sourceInstant StringSnapshot Id 
- sourceSnapshot List<Property Map>Encryption Keys 
- The customer-supplied encryption key of the source snapshot.
- sourceSnapshot StringId 
- The unique ID of the snapshot used to create this disk. This value identifies the exact snapshot that was used to create this persistent disk. For example, if you created the persistent disk from a snapshot that was later deleted and recreated under the same name, the source snapshot ID would identify the exact version of the snapshot that was used.
- sourceStorage StringObject 
- storagePool String
- type String
- URL of the disk type resource describing which disk type to use to create the disk.
- users List<String>
- Links to the users of the disk (attached instances) in form: project/zones/zone/instances/instance
- project String
- zone String
- A reference to the zone where the disk resides.
Supporting Types
GetDiskAsyncPrimaryDisk    
- Disk string
- Primary disk for asynchronous disk replication.
- Disk string
- Primary disk for asynchronous disk replication.
- disk String
- Primary disk for asynchronous disk replication.
- disk string
- Primary disk for asynchronous disk replication.
- disk str
- Primary disk for asynchronous disk replication.
- disk String
- Primary disk for asynchronous disk replication.
GetDiskDiskEncryptionKey    
- KmsKey stringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- KmsKey stringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- RawKey string
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- RsaEncrypted stringKey 
- Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey.
- Sha256 string
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- KmsKey stringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- KmsKey stringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- RawKey string
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- RsaEncrypted stringKey 
- Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey.
- Sha256 string
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kmsKey StringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kmsKey StringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- rawKey String
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- rsaEncrypted StringKey 
- Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey.
- sha256 String
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kmsKey stringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kmsKey stringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- rawKey string
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- rsaEncrypted stringKey 
- Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey.
- sha256 string
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kms_key_ strself_ link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kms_key_ strservice_ account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- raw_key str
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- rsa_encrypted_ strkey 
- Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey.
- sha256 str
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kmsKey StringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kmsKey StringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- rawKey String
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- rsaEncrypted StringKey 
- Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey.
- sha256 String
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
GetDiskGuestOsFeature    
- Type string
- URL of the disk type resource describing which disk type to use to create the disk.
- Type string
- URL of the disk type resource describing which disk type to use to create the disk.
- type String
- URL of the disk type resource describing which disk type to use to create the disk.
- type string
- URL of the disk type resource describing which disk type to use to create the disk.
- type str
- URL of the disk type resource describing which disk type to use to create the disk.
- type String
- URL of the disk type resource describing which disk type to use to create the disk.
GetDiskParam  
- Dictionary<string, string>
- Resource manager tags to be bound to the disk. Tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456.
- map[string]string
- Resource manager tags to be bound to the disk. Tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456.
- Map<String,String>
- Resource manager tags to be bound to the disk. Tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456.
- {[key: string]: string}
- Resource manager tags to be bound to the disk. Tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456.
- Mapping[str, str]
- Resource manager tags to be bound to the disk. Tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456.
- Map<String>
- Resource manager tags to be bound to the disk. Tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456.
GetDiskSourceImageEncryptionKey     
- KmsKey stringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- KmsKey stringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- RawKey string
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- Sha256 string
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- KmsKey stringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- KmsKey stringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- RawKey string
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- Sha256 string
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kmsKey StringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kmsKey StringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- rawKey String
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- sha256 String
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kmsKey stringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kmsKey stringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- rawKey string
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- sha256 string
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kms_key_ strself_ link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kms_key_ strservice_ account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- raw_key str
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- sha256 str
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kmsKey StringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kmsKey StringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- rawKey String
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- sha256 String
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
GetDiskSourceSnapshotEncryptionKey     
- KmsKey stringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- KmsKey stringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- RawKey string
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- Sha256 string
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- KmsKey stringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- KmsKey stringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- RawKey string
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- Sha256 string
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kmsKey StringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kmsKey StringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- rawKey String
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- sha256 String
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kmsKey stringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kmsKey stringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- rawKey string
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- sha256 string
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kms_key_ strself_ link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kms_key_ strservice_ account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- raw_key str
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- sha256 str
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
- kmsKey StringSelf Link 
- The self link of the encryption key used to encrypt the disk. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
- kmsKey StringService Account 
- The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
- rawKey String
- Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
- sha256 String
- The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the google-betaTerraform Provider.