---
title: Cloud KMS Key Handle
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > Cloud KMS Key Handle
---

# Cloud KMS Key Handle

A Cloud KMS Key Handle is a reference to a cryptographic key stored in Google Cloud Key Management Service. It represents the key's identity and location so applications or services can use it for encryption, decryption, signing, or key management operations without exposing the key material itself.

```
gcp.cloudkms_key_handle
```

## Fields

| Title                  | ID   | Type          | Data Type                                                                                                                                                                       | Description |
| ---------------------- | ---- | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key                   | core | string        |
| ancestors              | core | array<string> |
| datadog_display_name   | core | string        |
| labels                 | core | array<string> |
| name                   | core | string        | Identifier. Name of the KeyHandle resource, e.g. `projects/{PROJECT_ID}/locations/{LOCATION}/keyHandles/{KEY_HANDLE_ID}`.                                                       |
| organization_id        | core | string        |
| parent                 | core | string        |
| project_id             | core | string        |
| project_number         | core | string        |
| region_id              | core | string        |
| resource_name          | core | string        |
| resource_type_selector | core | string        | Required. Indicates the resource type that the resulting CryptoKey is meant to protect, e.g. `{SERVICE}.googleapis.com/{TYPE}`. See documentation for supported resource types. |
| tags                   | core | hstore_csv    |
| zone_id                | core | string        |