---
title: Google Cloud Key Management Service
description: >-
  Monitor Google Cloud KMS key usage, request counts, and latencies for your
  cryptographic operations.
breadcrumbs: Docs > Integrations > Google Cloud Key Management Service
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Google Cloud Key Management Service
Integration version1.0.0
{% callout %}
# Important note for users on the following Datadog sites: us2.ddog-gov.com

{% alert level="info" %}
To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com).
{% /alert %}

{% /callout %}

## Overview{% #overview %}

Cloud Key Management Service (KMS) lets you create, manage, and use cryptographic keys for your Google Cloud services, including support for hardware security modules (HSM) and external key management (EKM). Use the Datadog Google Cloud Platform integration to collect metrics from Google Cloud KMS.

## Setup{% #setup %}

### Installation{% #installation %}

If you haven't already, set up the [Google Cloud Platform integration](https://docs.datadoghq.com/integrations/google-cloud-platform.md) first. There are no other installation steps.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **gcp.cloudkms.ekm.external.request_count**(count)                           | Requests to the External Key Manager service since the last sample.                                                                                                            |
| **gcp.cloudkms.ekm.external.request_latencies.avg**(gauge)                   | Distribution of latencies to the External Key Manager service, in milliseconds.*Shown as millisecond*                                                                          |
| **gcp.cloudkms.ekm.external.request_latencies.samplecount**(count)           | Distribution of latencies to the External Key Manager service, in milliseconds.                                                                                                |
| **gcp.cloudkms.ekm.external.request_latencies.sumsqdev**(count)              | Distribution of latencies to the External Key Manager service, in milliseconds.                                                                                                |
| **gcp.cloudkms.peak_qps**(gauge)                                             | The project's maximum per-second crypto request count. The period must be one minute or longer.                                                                                |
| **gcp.cloudkms.quota.external_kms_multiregion_requests.exceeded**(count)   | Number of attempts to exceed the limit on quota metric cloudkms.googleapis.com/external_kms_multiregion_requests. After sampling, data is not visible for up to 150 seconds.   |
| **gcp.cloudkms.quota.external_kms_multiregion_requests.limit**(gauge)      | Current limit on quota metric cloudkms.googleapis.com/external_kms_multiregion_requests.                                                                                       |
| **gcp.cloudkms.quota.external_kms_multiregion_requests.usage**(count)      | Current usage on quota metric cloudkms.googleapis.com/external_kms_multiregion_requests. After sampling, data is not visible for up to 150 seconds.                            |
| **gcp.cloudkms.quota.hsm_multiregion_asymmetric_requests.exceeded**(count) | Number of attempts to exceed the limit on quota metric cloudkms.googleapis.com/hsm_multiregion_asymmetric_requests. After sampling, data is not visible for up to 150 seconds. |
| **gcp.cloudkms.quota.hsm_multiregion_asymmetric_requests.limit**(gauge)    | Current limit on quota metric cloudkms.googleapis.com/hsm_multiregion_asymmetric_requests.                                                                                     |
| **gcp.cloudkms.quota.hsm_multiregion_asymmetric_requests.usage**(count)    | Current usage on quota metric cloudkms.googleapis.com/hsm_multiregion_asymmetric_requests. After sampling, data is not visible for up to 150 seconds.                          |
| **gcp.cloudkms.quota.hsm_multiregion_symmetric_requests.exceeded**(count)  | Number of attempts to exceed the limit on quota metric cloudkms.googleapis.com/hsm_multiregion_symmetric_requests. After sampling, data is not visible for up to 150 seconds.  |
| **gcp.cloudkms.quota.hsm_multiregion_symmetric_requests.limit**(gauge)     | Current limit on quota metric cloudkms.googleapis.com/hsm_multiregion_symmetric_requests.                                                                                      |
| **gcp.cloudkms.quota.hsm_multiregion_symmetric_requests.usage**(count)     | Current usage on quota metric cloudkms.googleapis.com/hsm_multiregion_symmetric_requests. After sampling, data is not visible for up to 150 seconds.                           |

### Events{% #events %}

The Google Cloud KMS integration does not include any events.

### Service Checks{% #service-checks %}

The Google Cloud KMS integration does not include any service checks.

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).