.TH "GCLOUD_ALPHA_STORAGE_SERVICE\-AGENT" 1



.SH "NAME"
.HP
gcloud alpha storage service\-agent \- manage a project's Cloud Storage service agent, which is used to perform Cloud KMS operations



.SH "SYNOPSIS"
.HP
\f5gcloud alpha storage service\-agent\fR [\fB\-\-authorize\-cmek\fR=\fIAUTHORIZE_CMEK\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(ALPHA)\fR \fBgcloud alpha storage service\-agent\fR displays the Cloud
Storage service agent, which is used to perform Cloud KMS operations against
your a default or supplied project. If the project does not yet have a service
agent, \fBgcloud alpha storage service\-agent\fR creates one.



.SH "EXAMPLES"

To show the service agent for your default project:

.RS 2m
$ gcloud alpha storage service\-agent
.RE

To show the service account for \f5\fImy\-project\fR\fR:

.RS 2m
$ gcloud alpha storage service\-agent \-\-project=my\-project
.RE

To authorize your default project to use a Cloud KMS key:

.RS 2m
$ gcloud alpha storage service\-agent \e
    \-\-authorize\-cmek=projects/key\-project/locations/us\-east1/\e
keyRings/key\-ring/cryptoKeys/my\-key
.RE



.SH "FLAGS"

.RS 2m
.TP 2m
\fB\-\-authorize\-cmek\fR=\fIAUTHORIZE_CMEK\fR

Adds appropriate encrypt/decrypt permissions to the specified Cloud KMS key.
This allows the Cloud Storage service agent to write and read Cloud
KMS\-encrypted objects in buckets associated with the service agent's project.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation\-only early access
allowlist. This variant is also available:

.RS 2m
$ gcloud storage service\-agent
.RE