.TH "GCLOUD_ALPHA_KMS_KEYS_VERSIONS_UPDATE" 1



.SH "NAME"
.HP
gcloud alpha kms keys versions update \- update a key version



.SH "SYNOPSIS"
.HP
\f5gcloud alpha kms keys versions update\fR \fIVERSION\fR [\fB\-\-ekm\-connection\-key\-path\fR=\fIEKM_CONNECTION_KEY_PATH\fR] [\fB\-\-external\-key\-uri\fR=\fIEXTERNAL_KEY_URI\fR] [\fB\-\-key\fR=\fIKEY\fR] [\fB\-\-keyring\fR=\fIKEYRING\fR] [\fB\-\-location\fR=\fILOCATION\fR] [\fB\-\-state\fR=\fISTATE\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(ALPHA)\fR gcloud alpha kms keys versions update can be used to update the
key versions. Updates can be made to the the key versions's state (enabling or
disabling it), to its external key URI (if the key version has protection level
EXTERNAL), or to its ekm connection key path (if the key version has protection
level EXTERNAL_VPC).



.SH "EXAMPLES"

The following command enables the key version 8 of key \f5frodo\fR within
keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud alpha kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=frodo \-\-state=enabled
.RE

The following command disables the key version 8 of key \f5frodo\fR within
keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud alpha kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=frodo \-\-state=disabled
.RE

The following command updates the external key URI of version 8 of key
\f5frodo\fR within keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud alpha kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=frodo \e
    \-\-external\-key\-uri=https://example.kms/v0/some/key/path
.RE

The following command updates the ekm connection key path of version 8 of key
\f5bilbo\fR within keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud alpha kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=bilbo \e
    \-\-ekm\-connection\-key\-path=v0/some/key/path
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m
\fIVERSION\fR

Name of the version to describe.


.RE
.sp

.SH "FLAGS"

.RS 2m
.TP 2m
\fB\-\-ekm\-connection\-key\-path\fR=\fIEKM_CONNECTION_KEY_PATH\fR

The path to the external key material on the EKM for keys with protection level
"external\-vpc".

.TP 2m
\fB\-\-external\-key\-uri\fR=\fIEXTERNAL_KEY_URI\fR

The URI of the external key for keys with protection level "external".

.TP 2m
\fB\-\-key\fR=\fIKEY\fR

The containing key.

.TP 2m
\fB\-\-keyring\fR=\fIKEYRING\fR

Key ring of the key.

.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

Location of the keyring.

.TP 2m
\fB\-\-state\fR=\fISTATE\fR

State of the key version.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation\-only early access
allowlist. These variants are also available:

.RS 2m
$ gcloud kms keys versions update
.RE

.RS 2m
$ gcloud beta kms keys versions update
.RE