Introduction to Key Access Justifications
Key Access Justifications provides a justification for every request to access keys stored in
an external key manager. It lets you approve or deny the access request based on
the provided justification. Using Key Access Justifications with Cloud External Key Manager
provides visibility into requests for encryption keys that allows data to
change state from at-rest to in-use.
For more information, see Overview of Key Access Justifications.
To learn about the core principles behind Cloud de Confiance by S3NS's administrative access
controls, see Overview of administrative access controls.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-07-29 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-07-29 UTC."],[],[]]
