Reference documentation and code samples for the Google Cloud Key Management Service v1 API class Autokey.
Provides interfaces for using Cloud KMS Autokey to provision new
[CryptoKeys][google.cloud.kms.v1.CryptoKey], ready for Customer Managed
Encryption Key (CMEK) use, on-demand. To support certain client tooling, this
feature is modeled around a [KeyHandle][google.cloud.kms.v1.KeyHandle]
resource: creating a [KeyHandle][google.cloud.kms.v1.KeyHandle] in a resource
project and given location triggers Cloud KMS Autokey to provision a
[CryptoKey][google.cloud.kms.v1.CryptoKey] in the configured key project and
the same location.
Prior to use in a given resource project,
[UpdateAutokeyConfig][google.cloud.kms.v1.AutokeyAdmin.UpdateAutokeyConfig]
should have been called on an ancestor folder, setting the key project where
Cloud KMS Autokey should create new
[CryptoKeys][google.cloud.kms.v1.CryptoKey]. See documentation for additional
prerequisites. To check what key project, if any, is currently configured on
a resource project's ancestor folder, see
[ShowEffectiveAutokeyConfig][google.cloud.kms.v1.AutokeyAdmin.ShowEffectiveAutokeyConfig].
public static void BindService(ServiceBinderBase serviceBinder, Autokey.AutokeyBase serviceImpl)
Register service method with a service binder with or without implementation. Useful when customizing the service binding logic.
Note: this method is part of an experimental API that can change or be removed without any prior notice.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis page provides reference documentation for the \u003ccode\u003eAutokey\u003c/code\u003e class within the Google Cloud Key Management Service v1 API, specifically for version 3.13.0.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eAutokey\u003c/code\u003e class is designed to manage the on-demand provisioning of new \u003ccode\u003eCryptoKeys\u003c/code\u003e for Customer Managed Encryption Key (CMEK) use via \u003ccode\u003eKeyHandle\u003c/code\u003e resources.\u003c/p\u003e\n"],["\u003cp\u003eBefore using \u003ccode\u003eAutokey\u003c/code\u003e, an ancestor folder must be configured to designate the key project where \u003ccode\u003eCryptoKeys\u003c/code\u003e will be created, using the \u003ccode\u003eUpdateAutokeyConfig\u003c/code\u003e function.\u003c/p\u003e\n"],["\u003cp\u003eThe page details the \u003ccode\u003eBindService\u003c/code\u003e method, which creates a service definition that can be registered with a server or register methods to a service binder, along with its parameters and return types.\u003c/p\u003e\n"],["\u003cp\u003eA list of previous versions of \u003ccode\u003eAutokey\u003c/code\u003e is available on the page, ranging from the latest version 3.16.0 all the way down to version 2.2.0.\u003c/p\u003e\n"]]],[],null,[]]
