gcloud compute snapshots update-kms-key

INFORMATION
gcloud compute snapshots update-kms-key is supported in universe domain universe; however, some of the values used in the help text may not be available. Command examples may not work as-is and may requires changes before execution.
NAME
gcloud compute snapshots update-kms-key - update the KMS key of a Compute Engine snapshot
SYNOPSIS
gcloud compute snapshots update-kms-key SNAPSHOT_NAME [--region=REGION] [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] [GCLOUD_WIDE_FLAG …]
DESCRIPTION
  • gcloud compute snapshots update-kms-key updates the KMS key of a Compute Engine persistent snapshot by rotating it to the primary version of the key or to the primary version of a new KMS key.
EXAMPLES
To update the KMS key of a snapshot named example-snapshot-1, run: 
gcloud compute snapshots update-kms-key example-snapshot-1

To update the KMS key of a snapshot named example-snapshot-2 to a new KMS key named example-key in a key ring named example-key-ring in the global scope, run: 

gcloud compute snapshots update-kms-key example-snapshot-2 --kms-key=example-key --kms-keyring=example-key-ring --kms-location=global
POSITIONAL ARGUMENTS
SNAPSHOT_NAME
Name of the snapshot to update the KMS key for.
FLAGS
--region=REGION
The region of the snapshot to update.
Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the snapshot. The 'Compute Engine Service Agent' service account must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. The arguments in this group can be used to specify the attributes of this resource.
--kms-key=KMS_KEY
ID of the key or fully qualified identifier for the key.

To set the kms-key attribute:

  • provide the argument --kms-key on the command line.

This flag argument must be specified if any of the other arguments in this group are specified.

--kms-keyring=KMS_KEYRING
The KMS keyring of the key.

To set the kms-keyring attribute:

  • provide the argument --kms-key on the command line with a fully specified name;
  • provide the argument --kms-keyring on the command line.
--kms-location=KMS_LOCATION
The Google Cloud location for the key.

To set the kms-location attribute:

  • provide the argument --kms-key on the command line with a fully specified name;
  • provide the argument --kms-location on the command line;
  • provide the argument --region on the command line.
--kms-project=KMS_PROJECT
The Google Cloud project for the key.

To set the kms-project attribute:

  • provide the argument --kms-key on the command line with a fully specified name;
  • provide the argument --kms-project on the command line;
  • set the property core/project.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES
These variants are also available: 
gcloud alpha compute snapshots update-kms-key
 
gcloud beta compute snapshots update-kms-key