gcloud kms keys

https://cloud.google.com/sdk/gcloud/reference/kms/keys

gcloud kms keys list
gcloud kms keys list --location global --keyring sops
gcloud kms keys create

Help

ERROR: (gcloud.kms.keys) Command name argument expected.

Available groups for gcloud kms keys:

      versions                Create and manage versions.

Available commands for gcloud kms keys:

      add-iam-policy-binding     Add IAM policy binding for a kms key.
      create                     Create a new key.
      describe                   Get metadata for a given key.
      get-iam-policy             Get the IAM policy for a key.
      list                       List the keys within a keyring.
      remove-iam-policy-binding  Remove IAM policy binding for a kms key.
      remove-rotation-schedule   Remove the rotation schedule for a key.
      set-iam-policy             Set the IAM policy for a key.
      set-primary-version        Set the primary version of a key.
      set-rotation-schedule      Update the rotation schedule for a key.
      update                     Update a key.

For detailed information on this command and its flags, run:
  gcloud kms keys --help

See also

• gcloud kms keys [ create | list | add-iam-policy-binding | describe | get-iam-policy | remove-iam-policy-binding | remove-rotation-schedule | set-iam-policy | set-primary-version | set-rotation-schedule | update ]
• GCP KMS, EKM: gcloud kms [ keys | encrypt | keyrings ], cloudkms.googleapis.com