.TH "GCLOUD_ALPHA_KMS_EKM\-CONFIG" 1



.SH "NAME"
.HP
gcloud alpha kms ekm\-config \- update and retrieve the EkmConfig



.SH "SYNOPSIS"
.HP
\f5gcloud alpha kms ekm\-config\fR \fICOMMAND\fR [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(ALPHA)\fR EkmConfig is a singleton resource that represents configuration
parameters that apply to all CryptoKeys and CryptoKeyVersions of EXTERNAL_VPC
protecion level.



.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-help.

Run \fB$ gcloud help\fR for details.



.SH "COMMANDS"

\f5\fICOMMAND\fR\fR is one of the following:

.RS 2m
.TP 2m
\fBadd\-iam\-policy\-binding\fR

\fB(ALPHA)\fR Add IAM policy binding to an EkmConfig.

.TP 2m
\fBdescribe\fR

\fB(ALPHA)\fR Describe the EkmConfig.

.TP 2m
\fBget\-iam\-policy\fR

\fB(ALPHA)\fR Get the IAM policy for an EkmConfig.

.TP 2m
\fBremove\-iam\-policy\-binding\fR

\fB(ALPHA)\fR Remove IAM policy binding from an EkmConfig.

.TP 2m
\fBset\-iam\-policy\fR

\fB(ALPHA)\fR Set the IAM policy for an EkmConfig.

.TP 2m
\fBupdate\fR

\fB(ALPHA)\fR Update the EkmConfig.


.RE
.sp

.SH "NOTES"

This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation\-only early access
allowlist. These variants are also available:

.RS 2m
$ gcloud kms ekm\-config
.RE

.RS 2m
$ gcloud beta kms ekm\-config
.RE