gcloud kms

• https://cloud.google.com/sdk/gcloud/reference/kms

gcloud kms asymmetric-decrypt      Decrypt an input file using an asymmetric-encryption key version.
gcloud kms asymmetric-sign         Sign a user input file using an asymmetric-signing key version.
gcloud kms decrypt                 Decrypt a ciphertext file using a Cloud KMS key.
gcloud kms encrypt                 Encrypt a plaintext file using a key.
gcloud kms mac-sign                Sign a user input file using a MAC key version.
gcloud kms mac-verify              Verify a user signature file using a MAC key version.
gcloud kms --help

gcloud kms keyrings create sops
gcloud kms keys list --location global --keyring sops

Related

• aws kms
• Google Cloud Key Management (KMS)
• gcloud auth application-default login
• sops --encrypt --gcp-kms

See also

• GCP KMS, EKM: gcloud kms [ keys | encrypt | keyrings ]
• KMS, Customer Master Key (CMK), GCP KMS, AWS Key Management Service (KMS) (aws kms), Google Cloud KMS (gcloud kms), Azure Key Vault, KMS v2 API, Kubernetes Key Management Service