Add Deny policy support for additional Cloud KMS permissions [351012030]

Assigned

Feature Request

Status Update

No update yet.

Description

st...@google.com

created issue #1

Jul 3, 2024 07:48PM

Problem you have encountered:

Unable to create deny policies for the following permissions listed below.

cloudkms.cryptoKeyVersions.create
cloudkms.cryptoKeyVersions.destroy
cloudkms.cryptoKeyVersions.update

According to the following documentation only cloudkms.cryptoKeyVersions.list and cloudkms.cryptoKeyVersions.get are the only permissions currently supported for deny policies for cloudkms.cryptoKeyVersions

What you expected to happen:

Be able to create deny policies for the following permissions listed below.

cloudkms.cryptoKeyVersions.create
cloudkms.cryptoKeyVersions.destroy
cloudkms.cryptoKeyVersions.update

Comments

ba...@google.com <ba...@google.com> Jul 4, 2024 05:20AM

Reassigned to ka...@google.com.

ka...@google.com <ka...@google.com> #2Jul 4, 2024 09:31AM

Reassigned to gc...@google.com.

Thanks for the report. I will route this to the appropriate internal team and update this when I hear back from them.

na...@google.com <na...@google.com> #3
Restricted+
Nov 1, 2024 04:18AM

Comment has been deleted.

Issue 351012030

Description

Problem you have encountered:

What you expected to happen:

Issue summary

Comments

ba...@google.com <ba...@google.com> Jul 4, 2024 05:20AM

ka...@google.com <ka...@google.com> #2Jul 4, 2024 09:31AM

na...@google.com <na...@google.com> #3 Restricted+ Nov 1, 2024 04:18AM

Add comment

Issue metadata

na...@google.com <na...@google.com> #3
Restricted+
Nov 1, 2024 04:18AM