yc kms symmetric-key

Written by

Updated at October 3, 2024

Manage symmetric keys

Syntax:

yc kms symmetric-key <command>

Aliases:

yc kms symmetric-key get — Show information about the specified symmetric key
yc kms symmetric-key list — List symmetric keys of the specified folder
yc kms symmetric-key list-versions — List versions of the specified symmetric key
yc kms symmetric-key create — Create symmetric key
yc kms symmetric-key update — Update the specified symmetric key
yc kms symmetric-key delete — Delete the specified symmetric key
yc kms symmetric-key set-primary-version — Set primary version of the specified symmetric key
yc kms symmetric-key schedule-version-destruction — Schedule destruction of the specified symmetric key version
yc kms symmetric-key cancel-version-destruction — Cancel destruction of the scheduled for destruction symmetric key version
yc kms symmetric-key rotate — Rotate the specified symmetric key: creates a new key version and makes it the primary version
yc kms symmetric-key list-operations — List operations for the specified symmetric key
yc kms symmetric-key list-access-bindings — List access bindings for the specified symmetric key
yc kms symmetric-key set-access-bindings — Set access bindings for the specified symmetric key and delete all existing access bindings if there were any
yc kms symmetric-key add-access-binding — Add access binding for the specified symmetric key
yc kms symmetric-key remove-access-binding — Remove access binding for the specified symmetric key

Flag	Description
`--profile`	`string` Set the custom configuration file.
`--debug`	Debug logging.
`--debug-grpc`	Debug gRPC logging. Very verbose, used for debugging connection problems.
`--no-user-output`	Disable printing user intended output to stderr.
`--retry`	`int` Enable gRPC retries. By default, retries are enabled with maximum 5 attempts. Pass 0 to disable retries. Pass any negative value for infinite retries. Even infinite retries are capped with 2 minutes timeout.
`--cloud-id`	`string` Set the ID of the cloud to use.
`--folder-id`	`string` Set the ID of the folder to use.
`--folder-name`	`string` Set the name of the folder to use (will be resolved to id).
`--endpoint`	`string` Set the Cloud API endpoint (host:port).
`--token`	`string` Set the OAuth token to use.
`--impersonate-service-account-id`	`string` Set the ID of the service account to impersonate.
`--no-browser`	Disable opening browser for authentication.
`--format`	`string` Set the output format: text (default), yaml, json, json-rest.
`--jq`	`string` Query to select values from the response using jq syntax
`-h`,`--help`	Display help for the command.