Viewing docs for Google Cloud v9.16.0
published on Thursday, Mar 19, 2026 by Pulumi
published on Thursday, Mar 19, 2026 by Pulumi
Viewing docs for Google Cloud v9.16.0
published on Thursday, Mar 19, 2026 by Pulumi
published on Thursday, Mar 19, 2026 by Pulumi
Retrieves the current IAM policy data for a Google Cloud KMS crypto key.
example
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const foo = gcp.kms.getCryptoKeyIamPolicy({
cryptoKeyId: cryptoKey.id,
});
import pulumi
import pulumi_gcp as gcp
foo = gcp.kms.get_crypto_key_iam_policy(crypto_key_id=crypto_key["id"])
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/kms"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := kms.GetCryptoKeyIamPolicy(ctx, &kms.GetCryptoKeyIamPolicyArgs{
CryptoKeyId: cryptoKey.Id,
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var foo = Gcp.Kms.GetCryptoKeyIamPolicy.Invoke(new()
{
CryptoKeyId = cryptoKey.Id,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.kms.KmsFunctions;
import com.pulumi.gcp.kms.inputs.GetCryptoKeyIamPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var foo = KmsFunctions.getCryptoKeyIamPolicy(GetCryptoKeyIamPolicyArgs.builder()
.cryptoKeyId(cryptoKey.id())
.build());
}
}
variables:
foo:
fn::invoke:
function: gcp:kms:getCryptoKeyIamPolicy
arguments:
cryptoKeyId: ${cryptoKey.id}
Using getCryptoKeyIamPolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getCryptoKeyIamPolicy(args: GetCryptoKeyIamPolicyArgs, opts?: InvokeOptions): Promise<GetCryptoKeyIamPolicyResult>
function getCryptoKeyIamPolicyOutput(args: GetCryptoKeyIamPolicyOutputArgs, opts?: InvokeOptions): Output<GetCryptoKeyIamPolicyResult>def get_crypto_key_iam_policy(crypto_key_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetCryptoKeyIamPolicyResult
def get_crypto_key_iam_policy_output(crypto_key_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetCryptoKeyIamPolicyResult]func GetCryptoKeyIamPolicy(ctx *Context, args *GetCryptoKeyIamPolicyArgs, opts ...InvokeOption) (*GetCryptoKeyIamPolicyResult, error)
func GetCryptoKeyIamPolicyOutput(ctx *Context, args *GetCryptoKeyIamPolicyOutputArgs, opts ...InvokeOption) GetCryptoKeyIamPolicyResultOutput> Note: This function is named GetCryptoKeyIamPolicy in the Go SDK.
public static class GetCryptoKeyIamPolicy
{
public static Task<GetCryptoKeyIamPolicyResult> InvokeAsync(GetCryptoKeyIamPolicyArgs args, InvokeOptions? opts = null)
public static Output<GetCryptoKeyIamPolicyResult> Invoke(GetCryptoKeyIamPolicyInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetCryptoKeyIamPolicyResult> getCryptoKeyIamPolicy(GetCryptoKeyIamPolicyArgs args, InvokeOptions options)
public static Output<GetCryptoKeyIamPolicyResult> getCryptoKeyIamPolicy(GetCryptoKeyIamPolicyArgs args, InvokeOptions options)
fn::invoke:
function: gcp:kms/getCryptoKeyIamPolicy:getCryptoKeyIamPolicy
arguments:
# arguments dictionaryThe following arguments are supported:
- Crypto
Key stringId - The crypto key ID, in the form
- Crypto
Key stringId - The crypto key ID, in the form
- crypto
Key StringId - The crypto key ID, in the form
- crypto
Key stringId - The crypto key ID, in the form
- crypto_
key_ strid - The crypto key ID, in the form
- crypto
Key StringId - The crypto key ID, in the form
getCryptoKeyIamPolicy Result
The following output properties are available:
- Crypto
Key stringId - Etag string
- (Computed) The etag of the IAM policy.
- Id string
- The provider-assigned unique ID for this managed resource.
- Policy
Data string - (Computed) The policy data
- Crypto
Key stringId - Etag string
- (Computed) The etag of the IAM policy.
- Id string
- The provider-assigned unique ID for this managed resource.
- Policy
Data string - (Computed) The policy data
- crypto
Key StringId - etag String
- (Computed) The etag of the IAM policy.
- id String
- The provider-assigned unique ID for this managed resource.
- policy
Data String - (Computed) The policy data
- crypto
Key stringId - etag string
- (Computed) The etag of the IAM policy.
- id string
- The provider-assigned unique ID for this managed resource.
- policy
Data string - (Computed) The policy data
- crypto_
key_ strid - etag str
- (Computed) The etag of the IAM policy.
- id str
- The provider-assigned unique ID for this managed resource.
- policy_
data str - (Computed) The policy data
- crypto
Key StringId - etag String
- (Computed) The etag of the IAM policy.
- id String
- The provider-assigned unique ID for this managed resource.
- policy
Data String - (Computed) The policy data
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
google-betaTerraform Provider.
Viewing docs for Google Cloud v9.16.0
published on Thursday, Mar 19, 2026 by Pulumi
published on Thursday, Mar 19, 2026 by Pulumi
