Skip to content

Latest commit

 

History

History

kms

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
src
src
 
 
README.md
README.md
 
 
pom.xml
pom.xml
 
 

README.md

Google Cloud KMS

Open in Cloud Shell

Google Cloud KMS is a cloud-hosted key management service for encrypting, decrypting, signing, and verifying data. These sample Java applications demonstrate how to access the Cloud KMS API using the Google Java API Client Libraries.

Prerequisites

Enable the API

You must enable the Google Cloud KMS API for your project in order to use these samples

Set Environment Variables

You must set your project ID in order to run the tests

$ export GOOGLE_CLOUD_PROJECT="<your-project-id-here>"

Grant Permissions

You must ensure that the user account or service account you used to authorize your gcloud session has the proper permissions to edit KMS resources for your project. In the Cloud Console under IAM, add the following roles to the project whose service account you're using to test:

  • Cloud KMS Admin
  • Cloud KMS CryptoKey Encrypter/Decrypter
  • Cloud KMS Importer
  • Cloud KMS CryptoKey Public Key Viewer
  • Cloud KMS CryptoKey Signer/Verifier

More information can be found in the Google KMS Docs