Cloud KMS Import Job

A Cloud KMS Import Job in Google Cloud is a temporary resource used to securely import cryptographic key material into Cloud Key Management Service. It defines the parameters and wrapping keys required for the import process, ensuring that key material is encrypted and protected during transfer. Once the import is complete, the job expires and cannot be reused.

gcp.cloudkms_import_job

Fields

TitleIDTypeData TypeDescription
_keycorestring
ancestorscorearray<string>
attestationcorejsonOutput only. Statement that was generated and signed by the key creator (for example, an HSM) at key creation time. Use this statement to verify attributes of the key as stored on the HSM, independently of Google. Only present if the chosen ImportMethod is one with a protection level of HSM.
create_timecoretimestampOutput only. The time at which this ImportJob was created.
datadog_display_namecorestring
expire_event_timecoretimestampOutput only. The time this ImportJob expired. Only present if state is EXPIRED.
expire_timecoretimestampOutput only. The time at which this ImportJob is scheduled for expiration and can no longer be used to import key material.
generate_timecoretimestampOutput only. The time this ImportJob's key material was generated.
import_methodcorestringRequired. Immutable. The wrapping method to be used for incoming key material.
labelscorearray<string>
namecorestringOutput only. The resource name for this ImportJob in the format `projects/*/locations/*/keyRings/*/importJobs/*`.
organization_idcorestring
parentcorestring
project_idcorestring
project_numbercorestring
protection_levelcorestringRequired. Immutable. The protection level of the ImportJob. This must match the protection_level of the version_template on the CryptoKey you attempt to import into.
region_idcorestring
resource_namecorestring
statecorestringOutput only. The current state of the ImportJob, indicating if it can be used.
tagscorehstore_csv
zone_idcorestring