gcloud kms

• https://cloud.google.com/sdk/gcloud/reference/kms

• gcloud kms asymmetric-decrypt Decrypt an input file using an asymmetric-encryption key version.
• gcloud kms asymmetric-sign Sign a user input file using an asymmetric-signing key version.
• gcloud kms decrypt Decrypt a ciphertext file using a Cloud KMS key.
• gcloud kms encrypt Encrypt a plaintext file using a key.
• gcloud kms mac-sign Sign a user input file using a MAC key version.
• gcloud kms mac-verify Verify a user signature file using a MAC key version.
• gcloud kms --help

• gcloud kms keyrings create you-keyring
• gcloud kms keys list --location global --keyring your-sops-keyring

Related

• aws kms
• Google Cloud Key Management (KMS)
• gcloud auth application-default login
• SOPS GCP KMS: sops --encrypt --gcp-kms

See also

• GCP KMS, EKM: gcloud kms [ keys | encrypt | keyrings ]
• KMS, Customer Master Key (CMK), GCP KMS, AWS Key Management Service (KMS) (aws kms), Google Cloud KMS (gcloud kms), Azure Key Vault, KMS v2 API, Kubernetes Key Management Service