gcloud kms

• https://cloud.google.com/sdk/gcloud/reference/kms

• gcloud kms asymmetric-decrypt Decrypt an input file using an asymmetric-encryption key version.
• gcloud kms asymmetric-sign Sign a user input file using an asymmetric-signing key version.
• gcloud kms decrypt Decrypt a ciphertext file using a Cloud KMS key.
• gcloud kms encrypt Encrypt a plaintext file using a key.
• gcloud kms mac-sign Sign a user input file using a MAC key version.
• gcloud kms mac-verify Verify a user signature file using a MAC key version.
• gcloud kms --help

• gcloud kms keyrings create you-keyring
• gcloud kms keys list --location global --keyring your-sops-keyring

Related

• aws kms
• Google Cloud Key Management (KMS)
• gcloud auth application-default login
• SOPS GCP KMS: sops --encrypt --gcp-kms

See also

• GCP KMS, EKM: gcloud kms [ keys | encrypt | keyrings ], cloudkms.googleapis.com
• KMS, Customer Master Key (CMK), GCP KMS, AWS Key Management Service (KMS) (aws kms), Google Cloud KMS (gcloud kms), Azure Key Vault, KMS v2 API, Kubernetes Key Management Service, permissions and roles