Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. cloudkms
  5. cloudkms/v1
  6. ImportJob

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.cloudkms/v1.ImportJob

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Create a new ImportJob within a KeyRing. ImportJob.import_method is required. Note - this resource’s API doesn’t support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

    Create ImportJob Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ImportJob(name: string, args: ImportJobArgs, opts?: CustomResourceOptions);
    @overload
def ImportJob(resource_name: str,
              args: ImportJobArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def ImportJob(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              import_method: Optional[ImportJobImportMethod] = None,
              key_ring_id: Optional[str] = None,
              protection_level: Optional[ImportJobProtectionLevel] = None,
              import_job_id: Optional[str] = None,
              location: Optional[str] = None,
              project: Optional[str] = None)
    func NewImportJob(ctx *Context, name string, args ImportJobArgs, opts ...ResourceOption) (*ImportJob, error)
    public ImportJob(string name, ImportJobArgs args, CustomResourceOptions? opts = null)
    public ImportJob(String name, ImportJobArgs args)
public ImportJob(String name, ImportJobArgs args, CustomResourceOptions options)

    type: google-native:cloudkms/v1:ImportJob
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ImportJobArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ImportJobArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ImportJobArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ImportJobArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ImportJobArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var importJobResource = new GoogleNative.Cloudkms.V1.ImportJob("importJobResource", new()
{
    ImportMethod = GoogleNative.Cloudkms.V1.ImportJobImportMethod.ImportMethodUnspecified,
    KeyRingId = "string",
    ProtectionLevel = GoogleNative.Cloudkms.V1.ImportJobProtectionLevel.ProtectionLevelUnspecified,
    ImportJobId = "string",
    Location = "string",
    Project = "string",
});

    example, err := cloudkms.NewImportJob(ctx, "importJobResource", &cloudkms.ImportJobArgs{
	ImportMethod:    cloudkms.ImportJobImportMethodImportMethodUnspecified,
	KeyRingId:       pulumi.String("string"),
	ProtectionLevel: cloudkms.ImportJobProtectionLevelProtectionLevelUnspecified,
	ImportJobId:     pulumi.String("string"),
	Location:        pulumi.String("string"),
	Project:         pulumi.String("string"),
})

    var importJobResource = new ImportJob("importJobResource", ImportJobArgs.builder()
    .importMethod("IMPORT_METHOD_UNSPECIFIED")
    .keyRingId("string")
    .protectionLevel("PROTECTION_LEVEL_UNSPECIFIED")
    .importJobId("string")
    .location("string")
    .project("string")
    .build());

    import_job_resource = google_native.cloudkms.v1.ImportJob("importJobResource",
    import_method=google_native.cloudkms.v1.ImportJobImportMethod.IMPORT_METHOD_UNSPECIFIED,
    key_ring_id="string",
    protection_level=google_native.cloudkms.v1.ImportJobProtectionLevel.PROTECTION_LEVEL_UNSPECIFIED,
    import_job_id="string",
    location="string",
    project="string")

    const importJobResource = new google_native.cloudkms.v1.ImportJob("importJobResource", {
    importMethod: google_native.cloudkms.v1.ImportJobImportMethod.ImportMethodUnspecified,
    keyRingId: "string",
    protectionLevel: google_native.cloudkms.v1.ImportJobProtectionLevel.ProtectionLevelUnspecified,
    importJobId: "string",
    location: "string",
    project: "string",
});

    type: google-native:cloudkms/v1:ImportJob
properties:
    importJobId: string
    importMethod: IMPORT_METHOD_UNSPECIFIED
    keyRingId: string
    location: string
    project: string
    protectionLevel: PROTECTION_LEVEL_UNSPECIFIED

    ImportJob Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The ImportJob resource accepts the following input properties:

    ImportMethod Pulumi.GoogleNative.Cloudkms.V1.ImportJobImportMethod
    Immutable. The wrapping method to be used for incoming key material.
    KeyRingId string
    ProtectionLevel Pulumi.GoogleNative.Cloudkms.V1.ImportJobProtectionLevel
    Immutable. The protection level of the ImportJob. This must match the protection_level of the version_template on the CryptoKey you attempt to import into.
    ImportJobId string
    Required. It must be unique within a KeyRing and match the regular expression [a-zA-Z0-9_-]{1,63}
    Location string
    Project string
    ImportMethod ImportJobImportMethod
    Immutable. The wrapping method to be used for incoming key material.
    KeyRingId string
    ProtectionLevel ImportJobProtectionLevel
    Immutable. The protection level of the ImportJob. This must match the protection_level of the version_template on the CryptoKey you attempt to import into.
    ImportJobId string
    Required. It must be unique within a KeyRing and match the regular expression [a-zA-Z0-9_-]{1,63}
    Location string
    Project string
    importMethod ImportJobImportMethod
    Immutable. The wrapping method to be used for incoming key material.
    keyRingId String
    protectionLevel ImportJobProtectionLevel
    Immutable. The protection level of the ImportJob. This must match the protection_level of the version_template on the CryptoKey you attempt to import into.
    importJobId String
    Required. It must be unique within a KeyRing and match the regular expression [a-zA-Z0-9_-]{1,63}
    location String
    project String
    importMethod ImportJobImportMethod
    Immutable. The wrapping method to be used for incoming key material.
    keyRingId string
    protectionLevel ImportJobProtectionLevel
    Immutable. The protection level of the ImportJob. This must match the protection_level of the version_template on the CryptoKey you attempt to import into.
    importJobId string
    Required. It must be unique within a KeyRing and match the regular expression [a-zA-Z0-9_-]{1,63}
    location string
    project string
    import_method ImportJobImportMethod
    Immutable. The wrapping method to be used for incoming key material.
    key_ring_id str
    protection_level ImportJobProtectionLevel
    Immutable. The protection level of the ImportJob. This must match the protection_level of the version_template on the CryptoKey you attempt to import into.
    import_job_id str
    Required. It must be unique within a KeyRing and match the regular expression [a-zA-Z0-9_-]{1,63}
    location str
    project str
    importMethod "IMPORT_METHOD_UNSPECIFIED" | "RSA_OAEP_3072_SHA1_AES_256" | "RSA_OAEP_4096_SHA1_AES_256" | "RSA_OAEP_3072_SHA256_AES_256" | "RSA_OAEP_4096_SHA256_AES_256" | "RSA_OAEP_3072_SHA256" | "RSA_OAEP_4096_SHA256"
    Immutable. The wrapping method to be used for incoming key material.
    keyRingId String
    protectionLevel "PROTECTION_LEVEL_UNSPECIFIED" | "SOFTWARE" | "HSM" | "EXTERNAL" | "EXTERNAL_VPC"
    Immutable. The protection level of the ImportJob. This must match the protection_level of the version_template on the CryptoKey you attempt to import into.
    importJobId String
    Required. It must be unique within a KeyRing and match the regular expression [a-zA-Z0-9_-]{1,63}
    location String
    project String

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ImportJob resource produces the following output properties:

    Attestation Pulumi.GoogleNative.Cloudkms.V1.Outputs.KeyOperationAttestationResponse
    Statement that was generated and signed by the key creator (for example, an HSM) at key creation time. Use this statement to verify attributes of the key as stored on the HSM, independently of Google. Only present if the chosen ImportMethod is one with a protection level of HSM.
    CreateTime string
    The time at which this ImportJob was created.
    ExpireEventTime string
    The time this ImportJob expired. Only present if state is EXPIRED.
    ExpireTime string
    The time at which this ImportJob is scheduled for expiration and can no longer be used to import key material.
    GenerateTime string
    The time this ImportJob's key material was generated.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The resource name for this ImportJob in the format projects/*/locations/*/keyRings/*/importJobs/*.
    PublicKey Pulumi.GoogleNative.Cloudkms.V1.Outputs.WrappingPublicKeyResponse
    The public key with which to wrap key material prior to import. Only returned if state is ACTIVE.
    State string
    The current state of the ImportJob, indicating if it can be used.
    Attestation KeyOperationAttestationResponse
    Statement that was generated and signed by the key creator (for example, an HSM) at key creation time. Use this statement to verify attributes of the key as stored on the HSM, independently of Google. Only present if the chosen ImportMethod is one with a protection level of HSM.
    CreateTime string
    The time at which this ImportJob was created.
    ExpireEventTime string
    The time this ImportJob expired. Only present if state is EXPIRED.
    ExpireTime string
    The time at which this ImportJob is scheduled for expiration and can no longer be used to import key material.
    GenerateTime string
    The time this ImportJob's key material was generated.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The resource name for this ImportJob in the format projects/*/locations/*/keyRings/*/importJobs/*.
    PublicKey WrappingPublicKeyResponse
    The public key with which to wrap key material prior to import. Only returned if state is ACTIVE.
    State string
    The current state of the ImportJob, indicating if it can be used.
    attestation KeyOperationAttestationResponse
    Statement that was generated and signed by the key creator (for example, an HSM) at key creation time. Use this statement to verify attributes of the key as stored on the HSM, independently of Google. Only present if the chosen ImportMethod is one with a protection level of HSM.
    createTime String
    The time at which this ImportJob was created.
    expireEventTime String
    The time this ImportJob expired. Only present if state is EXPIRED.
    expireTime String
    The time at which this ImportJob is scheduled for expiration and can no longer be used to import key material.
    generateTime String
    The time this ImportJob's key material was generated.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The resource name for this ImportJob in the format projects/*/locations/*/keyRings/*/importJobs/*.
    publicKey WrappingPublicKeyResponse
    The public key with which to wrap key material prior to import. Only returned if state is ACTIVE.
    state String
    The current state of the ImportJob, indicating if it can be used.
    attestation KeyOperationAttestationResponse
    Statement that was generated and signed by the key creator (for example, an HSM) at key creation time. Use this statement to verify attributes of the key as stored on the HSM, independently of Google. Only present if the chosen ImportMethod is one with a protection level of HSM.
    createTime string
    The time at which this ImportJob was created.
    expireEventTime string
    The time this ImportJob expired. Only present if state is EXPIRED.
    expireTime string
    The time at which this ImportJob is scheduled for expiration and can no longer be used to import key material.
    generateTime string
    The time this ImportJob's key material was generated.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The resource name for this ImportJob in the format projects/*/locations/*/keyRings/*/importJobs/*.
    publicKey WrappingPublicKeyResponse
    The public key with which to wrap key material prior to import. Only returned if state is ACTIVE.
    state string
    The current state of the ImportJob, indicating if it can be used.
    attestation KeyOperationAttestationResponse
    Statement that was generated and signed by the key creator (for example, an HSM) at key creation time. Use this statement to verify attributes of the key as stored on the HSM, independently of Google. Only present if the chosen ImportMethod is one with a protection level of HSM.
    create_time str
    The time at which this ImportJob was created.
    expire_event_time str
    The time this ImportJob expired. Only present if state is EXPIRED.
    expire_time str
    The time at which this ImportJob is scheduled for expiration and can no longer be used to import key material.
    generate_time str
    The time this ImportJob's key material was generated.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    The resource name for this ImportJob in the format projects/*/locations/*/keyRings/*/importJobs/*.
    public_key WrappingPublicKeyResponse
    The public key with which to wrap key material prior to import. Only returned if state is ACTIVE.
    state str
    The current state of the ImportJob, indicating if it can be used.
    attestation Property Map
    Statement that was generated and signed by the key creator (for example, an HSM) at key creation time. Use this statement to verify attributes of the key as stored on the HSM, independently of Google. Only present if the chosen ImportMethod is one with a protection level of HSM.
    createTime String
    The time at which this ImportJob was created.
    expireEventTime String
    The time this ImportJob expired. Only present if state is EXPIRED.
    expireTime String
    The time at which this ImportJob is scheduled for expiration and can no longer be used to import key material.
    generateTime String
    The time this ImportJob's key material was generated.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The resource name for this ImportJob in the format projects/*/locations/*/keyRings/*/importJobs/*.
    publicKey Property Map
    The public key with which to wrap key material prior to import. Only returned if state is ACTIVE.
    state String
    The current state of the ImportJob, indicating if it can be used.

    Supporting Types

    CertificateChainsResponse, CertificateChainsResponseArgs

    CaviumCerts List<string>
    Cavium certificate chain corresponding to the attestation.
    GoogleCardCerts List<string>
    Google card certificate chain corresponding to the attestation.
    GooglePartitionCerts List<string>
    Google partition certificate chain corresponding to the attestation.
    CaviumCerts []string
    Cavium certificate chain corresponding to the attestation.
    GoogleCardCerts []string
    Google card certificate chain corresponding to the attestation.
    GooglePartitionCerts []string
    Google partition certificate chain corresponding to the attestation.
    caviumCerts List<String>
    Cavium certificate chain corresponding to the attestation.
    googleCardCerts List<String>
    Google card certificate chain corresponding to the attestation.
    googlePartitionCerts List<String>
    Google partition certificate chain corresponding to the attestation.
    caviumCerts string[]
    Cavium certificate chain corresponding to the attestation.
    googleCardCerts string[]
    Google card certificate chain corresponding to the attestation.
    googlePartitionCerts string[]
    Google partition certificate chain corresponding to the attestation.
    cavium_certs Sequence[str]
    Cavium certificate chain corresponding to the attestation.
    google_card_certs Sequence[str]
    Google card certificate chain corresponding to the attestation.
    google_partition_certs Sequence[str]
    Google partition certificate chain corresponding to the attestation.
    caviumCerts List<String>
    Cavium certificate chain corresponding to the attestation.
    googleCardCerts List<String>
    Google card certificate chain corresponding to the attestation.
    googlePartitionCerts List<String>
    Google partition certificate chain corresponding to the attestation.

    ImportJobImportMethod, ImportJobImportMethodArgs

    ImportMethodUnspecified
    IMPORT_METHOD_UNSPECIFIEDNot specified.
    RsaOaep3072Sha1Aes256
    RSA_OAEP_3072_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep4096Sha1Aes256
    RSA_OAEP_4096_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep3072Sha256Aes256
    RSA_OAEP_3072_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep4096Sha256Aes256
    RSA_OAEP_4096_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep3072Sha256
    RSA_OAEP_3072_SHA256This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    RsaOaep4096Sha256
    RSA_OAEP_4096_SHA256This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    ImportJobImportMethodImportMethodUnspecified
    IMPORT_METHOD_UNSPECIFIEDNot specified.
    ImportJobImportMethodRsaOaep3072Sha1Aes256
    RSA_OAEP_3072_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    ImportJobImportMethodRsaOaep4096Sha1Aes256
    RSA_OAEP_4096_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    ImportJobImportMethodRsaOaep3072Sha256Aes256
    RSA_OAEP_3072_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    ImportJobImportMethodRsaOaep4096Sha256Aes256
    RSA_OAEP_4096_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    ImportJobImportMethodRsaOaep3072Sha256
    RSA_OAEP_3072_SHA256This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    ImportJobImportMethodRsaOaep4096Sha256
    RSA_OAEP_4096_SHA256This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    ImportMethodUnspecified
    IMPORT_METHOD_UNSPECIFIEDNot specified.
    RsaOaep3072Sha1Aes256
    RSA_OAEP_3072_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep4096Sha1Aes256
    RSA_OAEP_4096_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep3072Sha256Aes256
    RSA_OAEP_3072_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep4096Sha256Aes256
    RSA_OAEP_4096_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep3072Sha256
    RSA_OAEP_3072_SHA256This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    RsaOaep4096Sha256
    RSA_OAEP_4096_SHA256This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    ImportMethodUnspecified
    IMPORT_METHOD_UNSPECIFIEDNot specified.
    RsaOaep3072Sha1Aes256
    RSA_OAEP_3072_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep4096Sha1Aes256
    RSA_OAEP_4096_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep3072Sha256Aes256
    RSA_OAEP_3072_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep4096Sha256Aes256
    RSA_OAEP_4096_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RsaOaep3072Sha256
    RSA_OAEP_3072_SHA256This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    RsaOaep4096Sha256
    RSA_OAEP_4096_SHA256This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    IMPORT_METHOD_UNSPECIFIED
    IMPORT_METHOD_UNSPECIFIEDNot specified.
    RSA_OAEP3072_SHA1_AES256
    RSA_OAEP_3072_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RSA_OAEP4096_SHA1_AES256
    RSA_OAEP_4096_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RSA_OAEP3072_SHA256_AES256
    RSA_OAEP_3072_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RSA_OAEP4096_SHA256_AES256
    RSA_OAEP_4096_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    RSA_OAEP3072_SHA256
    RSA_OAEP_3072_SHA256This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    RSA_OAEP4096_SHA256
    RSA_OAEP_4096_SHA256This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    "IMPORT_METHOD_UNSPECIFIED"
    IMPORT_METHOD_UNSPECIFIEDNot specified.
    "RSA_OAEP_3072_SHA1_AES_256"
    RSA_OAEP_3072_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    "RSA_OAEP_4096_SHA1_AES_256"
    RSA_OAEP_4096_SHA1_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    "RSA_OAEP_3072_SHA256_AES_256"
    RSA_OAEP_3072_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.
    "RSA_OAEP_4096_SHA256_AES_256"
    RSA_OAEP_4096_SHA256_AES_256This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.
    "RSA_OAEP_3072_SHA256"
    RSA_OAEP_3072_SHA256This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.
    "RSA_OAEP_4096_SHA256"
    RSA_OAEP_4096_SHA256This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.

    ImportJobProtectionLevel, ImportJobProtectionLevelArgs

    ProtectionLevelUnspecified
    PROTECTION_LEVEL_UNSPECIFIEDNot specified.
    Software
    SOFTWARECrypto operations are performed in software.
    Hsm
    HSMCrypto operations are performed in a Hardware Security Module.
    External
    EXTERNALCrypto operations are performed by an external key manager.
    ExternalVpc
    EXTERNAL_VPCCrypto operations are performed in an EKM-over-VPC backend.
    ImportJobProtectionLevelProtectionLevelUnspecified
    PROTECTION_LEVEL_UNSPECIFIEDNot specified.
    ImportJobProtectionLevelSoftware
    SOFTWARECrypto operations are performed in software.
    ImportJobProtectionLevelHsm
    HSMCrypto operations are performed in a Hardware Security Module.
    ImportJobProtectionLevelExternal
    EXTERNALCrypto operations are performed by an external key manager.
    ImportJobProtectionLevelExternalVpc
    EXTERNAL_VPCCrypto operations are performed in an EKM-over-VPC backend.
    ProtectionLevelUnspecified
    PROTECTION_LEVEL_UNSPECIFIEDNot specified.
    Software
    SOFTWARECrypto operations are performed in software.
    Hsm
    HSMCrypto operations are performed in a Hardware Security Module.
    External
    EXTERNALCrypto operations are performed by an external key manager.
    ExternalVpc
    EXTERNAL_VPCCrypto operations are performed in an EKM-over-VPC backend.
    ProtectionLevelUnspecified
    PROTECTION_LEVEL_UNSPECIFIEDNot specified.
    Software
    SOFTWARECrypto operations are performed in software.
    Hsm
    HSMCrypto operations are performed in a Hardware Security Module.
    External
    EXTERNALCrypto operations are performed by an external key manager.
    ExternalVpc
    EXTERNAL_VPCCrypto operations are performed in an EKM-over-VPC backend.
    PROTECTION_LEVEL_UNSPECIFIED
    PROTECTION_LEVEL_UNSPECIFIEDNot specified.
    SOFTWARE
    SOFTWARECrypto operations are performed in software.
    HSM
    HSMCrypto operations are performed in a Hardware Security Module.
    EXTERNAL
    EXTERNALCrypto operations are performed by an external key manager.
    EXTERNAL_VPC
    EXTERNAL_VPCCrypto operations are performed in an EKM-over-VPC backend.
    "PROTECTION_LEVEL_UNSPECIFIED"
    PROTECTION_LEVEL_UNSPECIFIEDNot specified.
    "SOFTWARE"
    SOFTWARECrypto operations are performed in software.
    "HSM"
    HSMCrypto operations are performed in a Hardware Security Module.
    "EXTERNAL"
    EXTERNALCrypto operations are performed by an external key manager.
    "EXTERNAL_VPC"
    EXTERNAL_VPCCrypto operations are performed in an EKM-over-VPC backend.

    KeyOperationAttestationResponse, KeyOperationAttestationResponseArgs

    CertChains Pulumi.GoogleNative.Cloudkms.V1.Inputs.CertificateChainsResponse
    The certificate chains needed to validate the attestation
    Content string
    The attestation data provided by the HSM when the key operation was performed.
    Format string
    The format of the attestation data.
    CertChains CertificateChainsResponse
    The certificate chains needed to validate the attestation
    Content string
    The attestation data provided by the HSM when the key operation was performed.
    Format string
    The format of the attestation data.
    certChains CertificateChainsResponse
    The certificate chains needed to validate the attestation
    content String
    The attestation data provided by the HSM when the key operation was performed.
    format String
    The format of the attestation data.
    certChains CertificateChainsResponse
    The certificate chains needed to validate the attestation
    content string
    The attestation data provided by the HSM when the key operation was performed.
    format string
    The format of the attestation data.
    cert_chains CertificateChainsResponse
    The certificate chains needed to validate the attestation
    content str
    The attestation data provided by the HSM when the key operation was performed.
    format str
    The format of the attestation data.
    certChains Property Map
    The certificate chains needed to validate the attestation
    content String
    The attestation data provided by the HSM when the key operation was performed.
    format String
    The format of the attestation data.

    WrappingPublicKeyResponse, WrappingPublicKeyResponseArgs

    Pem string
    The public key, encoded in PEM format. For more information, see the RFC 7468 sections for General Considerations and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13).
    Pem string
    The public key, encoded in PEM format. For more information, see the RFC 7468 sections for General Considerations and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13).
    pem String
    The public key, encoded in PEM format. For more information, see the RFC 7468 sections for General Considerations and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13).
    pem string
    The public key, encoded in PEM format. For more information, see the RFC 7468 sections for General Considerations and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13).
    pem str
    The public key, encoded in PEM format. For more information, see the RFC 7468 sections for General Considerations and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13).
    pem String
    The public key, encoded in PEM format. For more information, see the RFC 7468 sections for General Considerations and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13).

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native