Google Cloud v8.27.0 published on Thursday, Apr 17, 2025 by Pulumi
gcp.kms.getCryptoKeyIamPolicy
Explore with Pulumi AI
Retrieves the current IAM policy data for a Google Cloud KMS crypto key.
example
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const foo = gcp.kms.getCryptoKeyIamPolicy({
    cryptoKeyId: cryptoKey.id,
});
import pulumi
import pulumi_gcp as gcp
foo = gcp.kms.get_crypto_key_iam_policy(crypto_key_id=crypto_key["id"])
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := kms.GetCryptoKeyIamPolicy(ctx, &kms.GetCryptoKeyIamPolicyArgs{
			CryptoKeyId: cryptoKey.Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() => 
{
    var foo = Gcp.Kms.GetCryptoKeyIamPolicy.Invoke(new()
    {
        CryptoKeyId = cryptoKey.Id,
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.kms.KmsFunctions;
import com.pulumi.gcp.kms.inputs.GetCryptoKeyIamPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var foo = KmsFunctions.getCryptoKeyIamPolicy(GetCryptoKeyIamPolicyArgs.builder()
            .cryptoKeyId(cryptoKey.id())
            .build());
    }
}
variables:
  foo:
    fn::invoke:
      function: gcp:kms:getCryptoKeyIamPolicy
      arguments:
        cryptoKeyId: ${cryptoKey.id}
Using getCryptoKeyIamPolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getCryptoKeyIamPolicy(args: GetCryptoKeyIamPolicyArgs, opts?: InvokeOptions): Promise<GetCryptoKeyIamPolicyResult>
function getCryptoKeyIamPolicyOutput(args: GetCryptoKeyIamPolicyOutputArgs, opts?: InvokeOptions): Output<GetCryptoKeyIamPolicyResult>def get_crypto_key_iam_policy(crypto_key_id: Optional[str] = None,
                              opts: Optional[InvokeOptions] = None) -> GetCryptoKeyIamPolicyResult
def get_crypto_key_iam_policy_output(crypto_key_id: Optional[pulumi.Input[str]] = None,
                              opts: Optional[InvokeOptions] = None) -> Output[GetCryptoKeyIamPolicyResult]func GetCryptoKeyIamPolicy(ctx *Context, args *GetCryptoKeyIamPolicyArgs, opts ...InvokeOption) (*GetCryptoKeyIamPolicyResult, error)
func GetCryptoKeyIamPolicyOutput(ctx *Context, args *GetCryptoKeyIamPolicyOutputArgs, opts ...InvokeOption) GetCryptoKeyIamPolicyResultOutput> Note: This function is named GetCryptoKeyIamPolicy in the Go SDK.
public static class GetCryptoKeyIamPolicy 
{
    public static Task<GetCryptoKeyIamPolicyResult> InvokeAsync(GetCryptoKeyIamPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetCryptoKeyIamPolicyResult> Invoke(GetCryptoKeyIamPolicyInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetCryptoKeyIamPolicyResult> getCryptoKeyIamPolicy(GetCryptoKeyIamPolicyArgs args, InvokeOptions options)
public static Output<GetCryptoKeyIamPolicyResult> getCryptoKeyIamPolicy(GetCryptoKeyIamPolicyArgs args, InvokeOptions options)
fn::invoke:
  function: gcp:kms/getCryptoKeyIamPolicy:getCryptoKeyIamPolicy
  arguments:
    # arguments dictionaryThe following arguments are supported:
- Crypto
Key stringId  - The crypto key ID, in the form
 
- Crypto
Key stringId  - The crypto key ID, in the form
 
- crypto
Key StringId  - The crypto key ID, in the form
 
- crypto
Key stringId  - The crypto key ID, in the form
 
- crypto_
key_ strid  - The crypto key ID, in the form
 
- crypto
Key StringId  - The crypto key ID, in the form
 
getCryptoKeyIamPolicy Result
The following output properties are available:
- Crypto
Key stringId  - Etag string
 - (Computed) The etag of the IAM policy.
 - Id string
 - The provider-assigned unique ID for this managed resource.
 - Policy
Data string - (Computed) The policy data
 
- Crypto
Key stringId  - Etag string
 - (Computed) The etag of the IAM policy.
 - Id string
 - The provider-assigned unique ID for this managed resource.
 - Policy
Data string - (Computed) The policy data
 
- crypto
Key StringId  - etag String
 - (Computed) The etag of the IAM policy.
 - id String
 - The provider-assigned unique ID for this managed resource.
 - policy
Data String - (Computed) The policy data
 
- crypto
Key stringId  - etag string
 - (Computed) The etag of the IAM policy.
 - id string
 - The provider-assigned unique ID for this managed resource.
 - policy
Data string - (Computed) The policy data
 
- crypto_
key_ strid  - etag str
 - (Computed) The etag of the IAM policy.
 - id str
 - The provider-assigned unique ID for this managed resource.
 - policy_
data str - (Computed) The policy data
 
- crypto
Key StringId  - etag String
 - (Computed) The etag of the IAM policy.
 - id String
 - The provider-assigned unique ID for this managed resource.
 - policy
Data String - (Computed) The policy data
 
Package Details
- Repository
 - Google Cloud (GCP) Classic pulumi/pulumi-gcp
 - License
 - Apache-2.0
 - Notes
 - This Pulumi package is based on the 
google-betaTerraform Provider.