Restrictions on Cloud KMS
API enablement
To use Cloud Key Management Service, you need to enable the Cloud Key Management Service API. This
can be done in the Trusted Cloud console.
Enable the API
Billing account
To use Cloud KMS, you need to use it in a project with a
billing account enabled.
Enable billing
Cloud KMS pricing is based on usage.
Supported countries
You can use Cloud KMS in any country where Trusted Cloud by S3NS services
are supported.
Restrictions with other Trusted Cloud services
The following topics provide information about restrictions when
Cloud KMS is integrated with other Trusted Cloud services.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-08-26 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-26 UTC."],[],[],null,["# Restrictions on Cloud KMS\n\nAPI enablement\n--------------\n\nTo use Cloud Key Management Service, you need to enable the Cloud Key Management Service API. This\ncan be done in the Google Cloud console.\n\n[Enable the API](https://console.cloud.google.com/flows/enableapi?apiid=cloudkms.googleapis.com)\n\n\u003cbr /\u003e\n\nBilling account\n---------------\n\nTo use Cloud KMS, you need to use it in a project with a\nbilling account enabled.\n\n[Enable billing](https://support.google.com/cloud/answer/6293499#enable_billing_for_a_project)\n\n\u003cbr /\u003e\n\n[Cloud KMS pricing](/kms/pricing) is based on usage.\n\nSupported countries\n-------------------\n\nYou can use Cloud KMS in any country where Google Cloud services\nare supported.\n\nRestrictions with other Google Cloud services\n---------------------------------------------\n\nThe following topics provide information about restrictions when\nCloud KMS is integrated with other Google Cloud services.\n\n- [Backup for GKE](/kubernetes-engine/docs/add-on/backup-for-gke/concepts/about-cmek#usage_considerations_and_limitations)\n- [BigQuery](/bigquery/docs/customer-managed-encryption#limitations)\n- [Cloud Healthcare API](/healthcare-api/docs/cmek#restrictions)\n- [Cloud Storage](/storage/docs/encryption/customer-managed-keys#restrictions)\n- [Cloud Tasks](/tasks/docs/use-cmek#limitations)\n- [Colab Enterprise](/colab/docs/cmek#restrictions)\n- [Compute Engine](/compute/docs/disks/customer-managed-encryption#limitations)\n- [Dataform](/dataform/docs/cmek#restrictions)\n- [Firestore](/firestore/docs/cmek#cmek-protects)"]]
