.TH "GCLOUD_ALPHA_KMS_KEY\-HANDLES_CREATE" 1



.SH "NAME"
.HP
gcloud alpha kms key\-handles create \- create a new KeyHandle



.SH "SYNOPSIS"
.HP
\f5gcloud alpha kms key\-handles create\fR \fB\-\-location\fR=\fILOCATION\fR \fB\-\-resource\-type\fR=\fIRESOURCE_TYPE\fR (\fB\-\-generate\-key\-handle\-id\fR\ |\ \fB\-\-key\-handle\-id\fR=\fIKEY_HANDLE_ID\fR) [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(ALPHA)\fR Creates a new KeyHandle, triggering the provisioning of a new
CryptoKey for CMEK use with the given resource type in the configured key
project and the same location



.SH "EXAMPLES"

The following command creates a KeyHandle named \f5my\-key\-handle\fR within the
location \f5global\fR for the resource type \f5compute.googleapis.com/Disk\fR:

.RS 2m
$ gcloud alpha kms key\-handles create \e
    \-\-key\-handle\-id=my\-key\-handle \-\-my\-key\-handle \e
    \-\-location=global \-\-resource\-type=compute.googleapis.com/Disk
.RE

In case we want to generate a random KeyHandle id, we can use the
\f5\-\-generate\-key\-handle\-id\fR flag instead of the
\f5\-\-key\-handle\-id\fR flag.



.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

Location resource \- The KMS location resource. This represents a Cloud
resource. (NOTE) Some attributes are not given arguments in this group but can
be set in other ways.

To set the \f5project\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5\-\-location\fR on the command line with a fully
specified name;
.IP "\(em" 2m
set the property \f5core/project\fR.
.RE
.sp

This must be specified.


.RS 2m
.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

ID of the location or fully qualified identifier for the location.

To set the \f5location\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5\-\-location\fR on the command line.
.RE
.sp

.RE
.sp
.TP 2m
\fB\-\-resource\-type\fR=\fIRESOURCE_TYPE\fR

The resource type selector for KeyHandle resources of the form
{SERVICE}.{UNIVERSE_DOMAIN}/{TYPE}.

.TP 2m

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-generate\-key\-handle\-id\fR

Generate a KeyHandle id for the new KeyHandle resource.

.TP 2m
\fB\-\-key\-handle\-id\fR=\fIKEY_HANDLE_ID\fR

The KeyHandle id for the new KeyHandle resource.


.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation\-only early access
allowlist. These variants are also available:

.RS 2m
$ gcloud kms key\-handles create
.RE

.RS 2m
$ gcloud beta kms key\-handles create
.RE