google_kms_crypto_key_versions resource

Use the google_kms_crypto_key_versions InSpec audit resource to to test a Google Cloud CryptoKeyVersion resource.

Examples

describe google_kms_crypto_key_versions(project: 'chef-gcp-inspec', location: 'europe-west2', key_ring: 'kms-key-ring', crypto_key: '') do
  its('count') { should be >= 1 }
  its('crypto_key_names') { should include 'kms-key' }
end

Properties

Properties that can be accessed from the google_kms_crypto_key_versions resource:

See google_kms_crypto_key_version for more detailed information.

• names: an array of google_kms_crypto_key_version name
• create_times: an array of google_kms_crypto_key_version create_time
• generate_times: an array of google_kms_crypto_key_version generate_time
• destroy_times: an array of google_kms_crypto_key_version destroy_time
• destroy_event_times: an array of google_kms_crypto_key_version destroy_event_time
• states: an array of google_kms_crypto_key_version state
• protection_levels: an array of google_kms_crypto_key_version protection_level
• algorithms: an array of google_kms_crypto_key_version algorithm
• attestations: an array of google_kms_crypto_key_version attestation
• import_jobs: an array of google_kms_crypto_key_version import_job
• import_times: an array of google_kms_crypto_key_version import_time
• import_failure_reasons: an array of google_kms_crypto_key_version import_failure_reason
• external_protection_level_options: an array of google_kms_crypto_key_version external_protection_level_options
• reimport_eligibles: an array of google_kms_crypto_key_version reimport_eligible
• key_rings: an array of google_kms_crypto_key_version key_ring
• crypto_keys: an array of google_kms_crypto_key_version crypto_key

Filter criteria

This resource supports all of the above properties as filter criteria, which can be used with where as a block or a method.

GCP permissions

Ensure the Cloud Key Management Service (KMS) API is enabled for the current project.