Google Cloud v8.21.0 published on Wednesday, Mar 5, 2025 by Pulumi
gcp.kms.getKeyHandles
Explore with Pulumi AI
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const myKeyHandles = gcp.kms.getKeyHandles({
    project: "resource-project-id",
    location: "us-central1",
    resourceTypeSelector: "storage.googleapis.com/Bucket",
});
import pulumi
import pulumi_gcp as gcp
my_key_handles = gcp.kms.get_key_handles(project="resource-project-id",
    location="us-central1",
    resource_type_selector="storage.googleapis.com/Bucket")
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := kms.GetKeyHandles(ctx, &kms.GetKeyHandlesArgs{
			Project:              pulumi.StringRef("resource-project-id"),
			Location:             "us-central1",
			ResourceTypeSelector: "storage.googleapis.com/Bucket",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() => 
{
    var myKeyHandles = Gcp.Kms.GetKeyHandles.Invoke(new()
    {
        Project = "resource-project-id",
        Location = "us-central1",
        ResourceTypeSelector = "storage.googleapis.com/Bucket",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.kms.KmsFunctions;
import com.pulumi.gcp.kms.inputs.GetKeyHandlesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var myKeyHandles = KmsFunctions.getKeyHandles(GetKeyHandlesArgs.builder()
            .project("resource-project-id")
            .location("us-central1")
            .resourceTypeSelector("storage.googleapis.com/Bucket")
            .build());
    }
}
variables:
  myKeyHandles:
    fn::invoke:
      function: gcp:kms:getKeyHandles
      arguments:
        project: resource-project-id
        location: us-central1
        resourceTypeSelector: storage.googleapis.com/Bucket
Using getKeyHandles
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getKeyHandles(args: GetKeyHandlesArgs, opts?: InvokeOptions): Promise<GetKeyHandlesResult>
function getKeyHandlesOutput(args: GetKeyHandlesOutputArgs, opts?: InvokeOptions): Output<GetKeyHandlesResult>def get_key_handles(location: Optional[str] = None,
                    project: Optional[str] = None,
                    resource_type_selector: Optional[str] = None,
                    opts: Optional[InvokeOptions] = None) -> GetKeyHandlesResult
def get_key_handles_output(location: Optional[pulumi.Input[str]] = None,
                    project: Optional[pulumi.Input[str]] = None,
                    resource_type_selector: Optional[pulumi.Input[str]] = None,
                    opts: Optional[InvokeOptions] = None) -> Output[GetKeyHandlesResult]func GetKeyHandles(ctx *Context, args *GetKeyHandlesArgs, opts ...InvokeOption) (*GetKeyHandlesResult, error)
func GetKeyHandlesOutput(ctx *Context, args *GetKeyHandlesOutputArgs, opts ...InvokeOption) GetKeyHandlesResultOutput> Note: This function is named GetKeyHandles in the Go SDK.
public static class GetKeyHandles 
{
    public static Task<GetKeyHandlesResult> InvokeAsync(GetKeyHandlesArgs args, InvokeOptions? opts = null)
    public static Output<GetKeyHandlesResult> Invoke(GetKeyHandlesInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetKeyHandlesResult> getKeyHandles(GetKeyHandlesArgs args, InvokeOptions options)
public static Output<GetKeyHandlesResult> getKeyHandles(GetKeyHandlesArgs args, InvokeOptions options)
fn::invoke:
  function: gcp:kms/getKeyHandles:getKeyHandles
  arguments:
    # arguments dictionaryThe following arguments are supported:
- Location string
- The Google Cloud Platform location for the KeyHandle.
A full list of valid locations can be found by running gcloud kms locations list.
- ResourceType stringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- Project string
- The project in which the resource belongs. If it is not provided, the provider project is used.
- Location string
- The Google Cloud Platform location for the KeyHandle.
A full list of valid locations can be found by running gcloud kms locations list.
- ResourceType stringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- Project string
- The project in which the resource belongs. If it is not provided, the provider project is used.
- location String
- The Google Cloud Platform location for the KeyHandle.
A full list of valid locations can be found by running gcloud kms locations list.
- resourceType StringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- project String
- The project in which the resource belongs. If it is not provided, the provider project is used.
- location string
- The Google Cloud Platform location for the KeyHandle.
A full list of valid locations can be found by running gcloud kms locations list.
- resourceType stringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- project string
- The project in which the resource belongs. If it is not provided, the provider project is used.
- location str
- The Google Cloud Platform location for the KeyHandle.
A full list of valid locations can be found by running gcloud kms locations list.
- resource_type_ strselector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- project str
- The project in which the resource belongs. If it is not provided, the provider project is used.
- location String
- The Google Cloud Platform location for the KeyHandle.
A full list of valid locations can be found by running gcloud kms locations list.
- resourceType StringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- project String
- The project in which the resource belongs. If it is not provided, the provider project is used.
getKeyHandles Result
The following output properties are available:
- Id string
- The provider-assigned unique ID for this managed resource.
- KeyHandles List<GetKey Handles Key Handle> 
- Location string
- The location of the KMS Key and KeyHandle.
- ResourceType stringSelector 
- Indicates the resource type that the resulting CryptoKey is meant to protect, e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- Project string
- The identifier of the project where KMS KeyHandle is created.
- Id string
- The provider-assigned unique ID for this managed resource.
- KeyHandles []GetKey Handles Key Handle 
- Location string
- The location of the KMS Key and KeyHandle.
- ResourceType stringSelector 
- Indicates the resource type that the resulting CryptoKey is meant to protect, e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- Project string
- The identifier of the project where KMS KeyHandle is created.
- id String
- The provider-assigned unique ID for this managed resource.
- keyHandles List<GetKey Handles Key Handle> 
- location String
- The location of the KMS Key and KeyHandle.
- resourceType StringSelector 
- Indicates the resource type that the resulting CryptoKey is meant to protect, e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- project String
- The identifier of the project where KMS KeyHandle is created.
- id string
- The provider-assigned unique ID for this managed resource.
- keyHandles GetKey Handles Key Handle[] 
- location string
- The location of the KMS Key and KeyHandle.
- resourceType stringSelector 
- Indicates the resource type that the resulting CryptoKey is meant to protect, e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- project string
- The identifier of the project where KMS KeyHandle is created.
- id str
- The provider-assigned unique ID for this managed resource.
- key_handles Sequence[GetKey Handles Key Handle] 
- location str
- The location of the KMS Key and KeyHandle.
- resource_type_ strselector 
- Indicates the resource type that the resulting CryptoKey is meant to protect, e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- project str
- The identifier of the project where KMS KeyHandle is created.
- id String
- The provider-assigned unique ID for this managed resource.
- keyHandles List<Property Map>
- location String
- The location of the KMS Key and KeyHandle.
- resourceType StringSelector 
- Indicates the resource type that the resulting CryptoKey is meant to protect, e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- project String
- The identifier of the project where KMS KeyHandle is created.
Supporting Types
GetKeyHandlesKeyHandle    
- KmsKey string
- The identifier of the KMS Key created for the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyRings/{keyRingName}/cryptoKeys/{cryptoKeyName}.
- Name string
- The name of the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}.
- ResourceType stringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- KmsKey string
- The identifier of the KMS Key created for the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyRings/{keyRingName}/cryptoKeys/{cryptoKeyName}.
- Name string
- The name of the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}.
- ResourceType stringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- kmsKey String
- The identifier of the KMS Key created for the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyRings/{keyRingName}/cryptoKeys/{cryptoKeyName}.
- name String
- The name of the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}.
- resourceType StringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- kmsKey string
- The identifier of the KMS Key created for the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyRings/{keyRingName}/cryptoKeys/{cryptoKeyName}.
- name string
- The name of the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}.
- resourceType stringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- kms_key str
- The identifier of the KMS Key created for the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyRings/{keyRingName}/cryptoKeys/{cryptoKeyName}.
- name str
- The name of the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}.
- resource_type_ strselector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
- kmsKey String
- The identifier of the KMS Key created for the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyRings/{keyRingName}/cryptoKeys/{cryptoKeyName}.
- name String
- The name of the KeyHandle. Its format is projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}.
- resourceType StringSelector 
- The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the google-betaTerraform Provider.