A customer-managed encryption key (CMEK) for the Compute Engine
resources of the associated workstation configuration. Specify the name of
your Cloud KMS encryption key and the default service account.
We recommend that you use a separate service account and follow
Cloud KMS best
practices.
Protobuf type
google.cloud.workstations.v1beta.WorkstationConfig.CustomerEncryptionKey
Immutable. The name of the Google Cloud KMS encryption key. For example,
"projects/PROJECT_ID/locations/REGION/keyRings/KEY_RING/cryptoKeys/KEY_NAME".
The key must be in the same region as the workstation configuration.
Immutable. The service account to use with the specified
KMS key. We recommend that you use a separate service account
and follow KMS best practices. For more information, see
Separation of
duties and
gcloud kms keys add-iam-policy-binding--member.
Immutable. The name of the Google Cloud KMS encryption key. For example,
"projects/PROJECT_ID/locations/REGION/keyRings/KEY_RING/cryptoKeys/KEY_NAME".
The key must be in the same region as the workstation configuration.
Immutable. The name of the Google Cloud KMS encryption key. For example,
"projects/PROJECT_ID/locations/REGION/keyRings/KEY_RING/cryptoKeys/KEY_NAME".
The key must be in the same region as the workstation configuration.
Immutable. The service account to use with the specified
KMS key. We recommend that you use a separate service account
and follow KMS best practices. For more information, see
Separation of
duties and
gcloud kms keys add-iam-policy-binding--member.
Immutable. The service account to use with the specified
KMS key. We recommend that you use a separate service account
and follow KMS best practices. For more information, see
Separation of
duties and
gcloud kms keys add-iam-policy-binding--member.
Immutable. The name of the Google Cloud KMS encryption key. For example,
"projects/PROJECT_ID/locations/REGION/keyRings/KEY_RING/cryptoKeys/KEY_NAME".
The key must be in the same region as the workstation configuration.
Immutable. The name of the Google Cloud KMS encryption key. For example,
"projects/PROJECT_ID/locations/REGION/keyRings/KEY_RING/cryptoKeys/KEY_NAME".
The key must be in the same region as the workstation configuration.
Immutable. The service account to use with the specified
KMS key. We recommend that you use a separate service account
and follow KMS best practices. For more information, see
Separation of
duties and
gcloud kms keys add-iam-policy-binding--member.
Immutable. The service account to use with the specified
KMS key. We recommend that you use a separate service account
and follow KMS best practices. For more information, see
Separation of
duties and
gcloud kms keys add-iam-policy-binding--member.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[],[]]