Google Cloud Key Management Service

Integration version1.0.0

To find out if this integration is available in your organization, see your Datadog Integrations page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email support@ddog-gov.com.

Overview

Cloud Key Management Service (KMS) lets you create, manage, and use cryptographic keys for your Google Cloud services, including support for hardware security modules (HSM) and external key management (EKM). Use the Datadog Google Cloud Platform integration to collect metrics from Google Cloud KMS.

Setup

Installation

If you haven’t already, set up the Google Cloud Platform integration first. There are no other installation steps.

Data Collected

Metrics

gcp.cloudkms.ekm.external.request_count
(count)
Requests to the External Key Manager service since the last sample.
gcp.cloudkms.ekm.external.request_latencies.avg
(gauge)
Distribution of latencies to the External Key Manager service, in milliseconds.
Shown as millisecond
gcp.cloudkms.ekm.external.request_latencies.samplecount
(count)
Distribution of latencies to the External Key Manager service, in milliseconds.
gcp.cloudkms.ekm.external.request_latencies.sumsqdev
(count)
Distribution of latencies to the External Key Manager service, in milliseconds.
gcp.cloudkms.peak_qps
(gauge)
The project’s maximum per-second crypto request count. The period must be one minute or longer.
gcp.cloudkms.quota.external_kms_multiregion_requests.exceeded
(count)
Number of attempts to exceed the limit on quota metric cloudkms.googleapis.com/external_kms_multiregion_requests. After sampling, data is not visible for up to 150 seconds.
gcp.cloudkms.quota.external_kms_multiregion_requests.limit
(gauge)
Current limit on quota metric cloudkms.googleapis.com/external_kms_multiregion_requests.
gcp.cloudkms.quota.external_kms_multiregion_requests.usage
(count)
Current usage on quota metric cloudkms.googleapis.com/external_kms_multiregion_requests. After sampling, data is not visible for up to 150 seconds.
gcp.cloudkms.quota.hsm_multiregion_asymmetric_requests.exceeded
(count)
Number of attempts to exceed the limit on quota metric cloudkms.googleapis.com/hsm_multiregion_asymmetric_requests. After sampling, data is not visible for up to 150 seconds.
gcp.cloudkms.quota.hsm_multiregion_asymmetric_requests.limit
(gauge)
Current limit on quota metric cloudkms.googleapis.com/hsm_multiregion_asymmetric_requests.
gcp.cloudkms.quota.hsm_multiregion_asymmetric_requests.usage
(count)
Current usage on quota metric cloudkms.googleapis.com/hsm_multiregion_asymmetric_requests. After sampling, data is not visible for up to 150 seconds.
gcp.cloudkms.quota.hsm_multiregion_symmetric_requests.exceeded
(count)
Number of attempts to exceed the limit on quota metric cloudkms.googleapis.com/hsm_multiregion_symmetric_requests. After sampling, data is not visible for up to 150 seconds.
gcp.cloudkms.quota.hsm_multiregion_symmetric_requests.limit
(gauge)
Current limit on quota metric cloudkms.googleapis.com/hsm_multiregion_symmetric_requests.
gcp.cloudkms.quota.hsm_multiregion_symmetric_requests.usage
(count)
Current usage on quota metric cloudkms.googleapis.com/hsm_multiregion_symmetric_requests. After sampling, data is not visible for up to 150 seconds.

Events

The Google Cloud KMS integration does not include any events.

Service Checks

The Google Cloud KMS integration does not include any service checks.

Troubleshooting

Need help? Contact Datadog support.