Resource name of a KMS crypto key (managed by the user) used to
encrypt/decrypt function source code objects in staging Cloud Storage
buckets. When you generate an upload url and upload your source code, it
gets copied to a staging Cloud Storage bucket in an internal regional
project. The source code is then copied to a versioned directory in the
sources bucket in the consumer project during the function deployment.
It must match the pattern
projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}.
The Google Cloud Functions service account
(service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be
granted the role 'Cloud KMS CryptoKey Encrypter/Decrypter
(roles/cloudkms.cryptoKeyEncrypterDecrypter)' on the
Key/KeyRing/Project/Organization (least access preferred). GCF will
delegate access to the Google Storage service account in the internal
project.
Resource name of a KMS crypto key (managed by the user) used to
encrypt/decrypt function source code objects in staging Cloud Storage
buckets. When you generate an upload url and upload your source code, it
gets copied to a staging Cloud Storage bucket in an internal regional
project. The source code is then copied to a versioned directory in the
sources bucket in the consumer project during the function deployment.
It must match the pattern
projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}.
The Google Cloud Functions service account
(service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be
granted the role 'Cloud KMS CryptoKey Encrypter/Decrypter
(roles/cloudkms.cryptoKeyEncrypterDecrypter)' on the
Key/KeyRing/Project/Organization (least access preferred). GCF will
delegate access to the Google Storage service account in the internal
project.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-02 UTC."],[],[]]