.TH "GCLOUD_KMS_KEY\-HANDLES_CREATE" 1



.SH "NAME"
.HP
gcloud kms key\-handles create \- create a new KeyHandle



.SH "SYNOPSIS"
.HP
\f5gcloud kms key\-handles create\fR \fB\-\-location\fR=\fILOCATION\fR \fB\-\-resource\-type\fR=\fIRESOURCE_TYPE\fR (\fB\-\-generate\-key\-handle\-id\fR\ |\ \fB\-\-key\-handle\-id\fR=\fIKEY_HANDLE_ID\fR) [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

Creates a new KeyHandle, triggering the provisioning of a new CryptoKey for CMEK
use with the given resource type in the configured key project and the same
location



.SH "EXAMPLES"

The following command creates a KeyHandle named \f5my\-key\-handle\fR within the
location \f5global\fR for the resource type \f5compute.googleapis.com/Disk\fR:

.RS 2m
$ gcloud kms key\-handles create \-\-key\-handle\-id=my\-key\-handle \e
    \-\-my\-key\-handle \-\-location=global \e
    \-\-resource\-type=compute.googleapis.com/Disk
.RE

In case we want to generate a random KeyHandle id, we can use the
\f5\-\-generate\-key\-handle\-id\fR flag instead of the
\f5\-\-key\-handle\-id\fR flag.



.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

Location resource \- The KMS location resource. This represents a Cloud
resource. (NOTE) Some attributes are not given arguments in this group but can
be set in other ways.

To set the \f5project\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5\-\-location\fR on the command line with a fully
specified name;
.IP "\(em" 2m
set the property \f5core/project\fR.
.RE
.sp

This must be specified.


.RS 2m
.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

ID of the location or fully qualified identifier for the location.

To set the \f5location\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5\-\-location\fR on the command line.
.RE
.sp

.RE
.sp
.TP 2m
\fB\-\-resource\-type\fR=\fIRESOURCE_TYPE\fR

The resource type selector for KeyHandle resources of the form
{SERVICE}.{UNIVERSE_DOMAIN}/{TYPE}.

.TP 2m

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-generate\-key\-handle\-id\fR

Generate a KeyHandle id for the new KeyHandle resource.

.TP 2m
\fB\-\-key\-handle\-id\fR=\fIKEY_HANDLE_ID\fR

The KeyHandle id for the new KeyHandle resource.


.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha kms key\-handles create
.RE

.RS 2m
$ gcloud beta kms key\-handles create
.RE