NAME
    gcloud kms keys - create and manage keys

SYNOPSIS
    gcloud kms keys GROUP | COMMAND [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    A key represents a logical key that can be used for cryptographic
    operations.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --help.

    Run $ gcloud help for details.

GROUPS
    GROUP is one of the following:

     versions
        Create and manage versions.

COMMANDS
    COMMAND is one of the following:

     add-iam-policy-binding
        Add IAM policy binding for a kms key.

     create
        Create a new key.

     describe
        Get metadata for a given key.

     get-iam-policy
        Get the IAM policy for a key.

     list
        List the keys within a keyring.

     remove-iam-policy-binding
        Remove IAM policy binding for a kms key.

     remove-rotation-schedule
        Remove the rotation schedule for a key.

     set-iam-policy
        Set the IAM policy for a key.

     set-primary-version
        Set the primary version of a key.

     set-rotation-schedule
        Update the rotation schedule for a key.

     update
        Update a key.

NOTES
    These variants are also available:

        $ gcloud alpha kms keys

        $ gcloud beta kms keys