Reference documentation and code samples for the Google Cloud Key Management Service v1 API class Autokey.
Provides interfaces for using Cloud KMS Autokey to provision new
[CryptoKeys][google.cloud.kms.v1.CryptoKey], ready for Customer Managed
Encryption Key (CMEK) use, on-demand. To support certain client tooling, this
feature is modeled around a [KeyHandle][google.cloud.kms.v1.KeyHandle]
resource: creating a [KeyHandle][google.cloud.kms.v1.KeyHandle] in a resource
project and given location triggers Cloud KMS Autokey to provision a
[CryptoKey][google.cloud.kms.v1.CryptoKey] in the configured key project and
the same location.
Prior to use in a given resource project,
[UpdateAutokeyConfig][google.cloud.kms.v1.AutokeyAdmin.UpdateAutokeyConfig]
should have been called on an ancestor folder, setting the key project where
Cloud KMS Autokey should create new
[CryptoKeys][google.cloud.kms.v1.CryptoKey]. See documentation for additional
prerequisites. To check what key project, if any, is currently configured on
a resource project's ancestor folder, see
[ShowEffectiveAutokeyConfig][google.cloud.kms.v1.AutokeyAdmin.ShowEffectiveAutokeyConfig].
public static void BindService(ServiceBinderBase serviceBinder, Autokey.AutokeyBase serviceImpl)
Register service method with a service binder with or without implementation. Useful when customizing the service binding logic.
Note: this method is part of an experimental API that can change or be removed without any prior notice.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis documentation page covers the \u003ccode\u003eAutokey\u003c/code\u003e class within the Google Cloud Key Management Service (KMS) v1 API, specifically version 3.12.0, and it's part of the namespace \u003ccode\u003eGoogle.Cloud.Kms.V1\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eAutokey\u003c/code\u003e class provides the ability to provision new \u003ccode\u003eCryptoKeys\u003c/code\u003e on-demand, using the \u003ccode\u003eKeyHandle\u003c/code\u003e resource as a trigger for Cloud KMS Autokey.\u003c/p\u003e\n"],["\u003cp\u003eBefore using \u003ccode\u003eAutokey\u003c/code\u003e, an ancestor folder should be configured using \u003ccode\u003eUpdateAutokeyConfig\u003c/code\u003e to specify the key project where new \u003ccode\u003eCryptoKeys\u003c/code\u003e will be created.\u003c/p\u003e\n"],["\u003cp\u003eThe page includes methods for \u003ccode\u003eBindService\u003c/code\u003e allowing the registration of the Autokey service methods with or without implementation, which is part of an experimental API.\u003c/p\u003e\n"],["\u003cp\u003eThe documentation provides links to different versions of the Autokey class, ranging from the latest version (3.16.0) down to version 2.2.0, making it easy to navigate between each release.\u003c/p\u003e\n"]]],[],null,[]]
