rocketkind
Security

Google Cloud KMS

Google Cloud KMS is Google Cloud's managed key service: a crypto key lives in a key ring in one location of one project, and the key material never leaves Google — you send it something to wrap and it sends back the wrapped form.

Authentication

  • Service account (JWT bearer)

Actions

Generic API request. Call any Google Cloud KMS API endpoint on this connection, for the case where no shipped action covers it yet. The connection supplies the base URL, the authentication and the egress route, so only the path, query and body are yours to fill.

  • DecryptUnwrap a payload that googlecloudkms:encrypt wrapped under the same crypto key.
  • EncryptWrap a small payload under a Cloud KMS crypto key.
  • List crypto keysList the Cloud KMS crypto keys held in one key ring.

Product names, logos and brands are the property of their respective owners and are used here for identification only. Their use does not imply endorsement by, or affiliation with, those owners.