Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. CockroachDB Cloud
  3. API Docs
  4. Cmek
CockroachDB v0.9.4 published on Friday, Mar 21, 2025 by pulumiverse
pulumiverse/pulumi-cockroach

cockroach.Cmek

Explore with Pulumi AI

CockroachDB v0.9.4 published on Friday, Mar 21, 2025 by pulumiverse
pulumiverse/pulumi-cockroach

Customer-managed encryption keys (CMEK) resource for a single cluster.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as cockroach from "@pulumiverse/cockroach";

const advanced = new cockroach.Cmek("advanced", {
    clusterId: advancedCockroachCluster.id,
    regions: [{
        region: "us-central-1",
        key: {
            authPrincipal: "arn:aws:iam::account:role/role-name-with-path",
            type: "AWS_KMS",
            uri: "arn:aws:kms:us-west-2:111122223333:key/id-of-kms-key",
        },
    }],
});
Copy
import pulumi
import pulumiverse_cockroach as cockroach

advanced = cockroach.Cmek("advanced",
    cluster_id=advanced_cockroach_cluster["id"],
    regions=[{
        "region": "us-central-1",
        "key": {
            "auth_principal": "arn:aws:iam::account:role/role-name-with-path",
            "type": "AWS_KMS",
            "uri": "arn:aws:kms:us-west-2:111122223333:key/id-of-kms-key",
        },
    }])
Copy
package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-cockroach/sdk/go/cockroach"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cockroach.NewCmek(ctx, "advanced", &cockroach.CmekArgs{
			ClusterId: pulumi.Any(advancedCockroachCluster.Id),
			Regions: cockroach.CmekRegionArray{
				&cockroach.CmekRegionArgs{
					Region: pulumi.String("us-central-1"),
					Key: &cockroach.CmekRegionKeyArgs{
						AuthPrincipal: pulumi.String("arn:aws:iam::account:role/role-name-with-path"),
						Type:          pulumi.String("AWS_KMS"),
						Uri:           pulumi.String("arn:aws:kms:us-west-2:111122223333:key/id-of-kms-key"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cockroach = Pulumiverse.Cockroach;

return await Deployment.RunAsync(() => 
{
    var advanced = new Cockroach.Cmek("advanced", new()
    {
        ClusterId = advancedCockroachCluster.Id,
        Regions = new[]
        {
            new Cockroach.Inputs.CmekRegionArgs
            {
                Region = "us-central-1",
                Key = new Cockroach.Inputs.CmekRegionKeyArgs
                {
                    AuthPrincipal = "arn:aws:iam::account:role/role-name-with-path",
                    Type = "AWS_KMS",
                    Uri = "arn:aws:kms:us-west-2:111122223333:key/id-of-kms-key",
                },
            },
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cockroach.Cmek;
import com.pulumi.cockroach.CmekArgs;
import com.pulumi.cockroach.inputs.CmekRegionArgs;
import com.pulumi.cockroach.inputs.CmekRegionKeyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var advanced = new Cmek("advanced", CmekArgs.builder()
            .clusterId(advancedCockroachCluster.id())
            .regions(CmekRegionArgs.builder()
                .region("us-central-1")
                .key(CmekRegionKeyArgs.builder()
                    .authPrincipal("arn:aws:iam::account:role/role-name-with-path")
                    .type("AWS_KMS")
                    .uri("arn:aws:kms:us-west-2:111122223333:key/id-of-kms-key")
                    .build())
                .build())
            .build());

    }
}
Copy
resources:
  advanced:
    type: cockroach:Cmek
    properties:
      clusterId: ${advancedCockroachCluster.id}
      regions:
        - region: us-central-1
          key:
            authPrincipal: arn:aws:iam::account:role/role-name-with-path
            type: AWS_KMS
            uri: arn:aws:kms:us-west-2:111122223333:key/id-of-kms-key
Copy

Create Cmek Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Cmek(name: string, args: CmekArgs, opts?: CustomResourceOptions);
@overload
def Cmek(resource_name: str,
         args: CmekArgs,
         opts: Optional[ResourceOptions] = None)

@overload
def Cmek(resource_name: str,
         opts: Optional[ResourceOptions] = None,
         cluster_id: Optional[str] = None,
         regions: Optional[Sequence[CmekRegionArgs]] = None,
         additional_regions: Optional[Sequence[CmekAdditionalRegionArgs]] = None,
         status: Optional[str] = None)
func NewCmek(ctx *Context, name string, args CmekArgs, opts ...ResourceOption) (*Cmek, error)
public Cmek(string name, CmekArgs args, CustomResourceOptions? opts = null)
public Cmek(String name, CmekArgs args)
public Cmek(String name, CmekArgs args, CustomResourceOptions options)

type: cockroach:Cmek
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. CmekArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. CmekArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. CmekArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. CmekArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. CmekArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var cmekResource = new Cockroach.Cmek("cmekResource", new()
{
    ClusterId = "string",
    Regions = new[]
    {
        new Cockroach.Inputs.CmekRegionArgs
        {
            Key = new Cockroach.Inputs.CmekRegionKeyArgs
            {
                AuthPrincipal = "string",
                Type = "string",
                Uri = "string",
                CreatedAt = "string",
                Status = "string",
                UpdatedAt = "string",
                UserMessage = "string",
            },
            Region = "string",
            Status = "string",
        },
    },
    AdditionalRegions = new[]
    {
        new Cockroach.Inputs.CmekAdditionalRegionArgs
        {
            Name = "string",
            InternalDns = "string",
            NodeCount = 0,
            Primary = false,
            SqlDns = "string",
            UiDns = "string",
        },
    },
    Status = "string",
});
Copy
example, err := cockroach.NewCmek(ctx, "cmekResource", &cockroach.CmekArgs{
	ClusterId: pulumi.String("string"),
	Regions: cockroach.CmekRegionArray{
		&cockroach.CmekRegionArgs{
			Key: &cockroach.CmekRegionKeyArgs{
				AuthPrincipal: pulumi.String("string"),
				Type:          pulumi.String("string"),
				Uri:           pulumi.String("string"),
				CreatedAt:     pulumi.String("string"),
				Status:        pulumi.String("string"),
				UpdatedAt:     pulumi.String("string"),
				UserMessage:   pulumi.String("string"),
			},
			Region: pulumi.String("string"),
			Status: pulumi.String("string"),
		},
	},
	AdditionalRegions: cockroach.CmekAdditionalRegionArray{
		&cockroach.CmekAdditionalRegionArgs{
			Name:        pulumi.String("string"),
			InternalDns: pulumi.String("string"),
			NodeCount:   pulumi.Int(0),
			Primary:     pulumi.Bool(false),
			SqlDns:      pulumi.String("string"),
			UiDns:       pulumi.String("string"),
		},
	},
	Status: pulumi.String("string"),
})
Copy
var cmekResource = new Cmek("cmekResource", CmekArgs.builder()
    .clusterId("string")
    .regions(CmekRegionArgs.builder()
        .key(CmekRegionKeyArgs.builder()
            .authPrincipal("string")
            .type("string")
            .uri("string")
            .createdAt("string")
            .status("string")
            .updatedAt("string")
            .userMessage("string")
            .build())
        .region("string")
        .status("string")
        .build())
    .additionalRegions(CmekAdditionalRegionArgs.builder()
        .name("string")
        .internalDns("string")
        .nodeCount(0)
        .primary(false)
        .sqlDns("string")
        .uiDns("string")
        .build())
    .status("string")
    .build());
Copy
cmek_resource = cockroach.Cmek("cmekResource",
    cluster_id="string",
    regions=[{
        "key": {
            "auth_principal": "string",
            "type": "string",
            "uri": "string",
            "created_at": "string",
            "status": "string",
            "updated_at": "string",
            "user_message": "string",
        },
        "region": "string",
        "status": "string",
    }],
    additional_regions=[{
        "name": "string",
        "internal_dns": "string",
        "node_count": 0,
        "primary": False,
        "sql_dns": "string",
        "ui_dns": "string",
    }],
    status="string")
Copy
const cmekResource = new cockroach.Cmek("cmekResource", {
    clusterId: "string",
    regions: [{
        key: {
            authPrincipal: "string",
            type: "string",
            uri: "string",
            createdAt: "string",
            status: "string",
            updatedAt: "string",
            userMessage: "string",
        },
        region: "string",
        status: "string",
    }],
    additionalRegions: [{
        name: "string",
        internalDns: "string",
        nodeCount: 0,
        primary: false,
        sqlDns: "string",
        uiDns: "string",
    }],
    status: "string",
});
Copy
type: cockroach:Cmek
properties:
    additionalRegions:
        - internalDns: string
          name: string
          nodeCount: 0
          primary: false
          sqlDns: string
          uiDns: string
    clusterId: string
    regions:
        - key:
            authPrincipal: string
            createdAt: string
            status: string
            type: string
            updatedAt: string
            uri: string
            userMessage: string
          region: string
          status: string
    status: string
Copy

Cmek Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Cmek resource accepts the following input properties:

ClusterId This property is required. string
Cluster ID.
Regions This property is required. List<Pulumiverse.Cockroach.Inputs.CmekRegion>
AdditionalRegions List<Pulumiverse.Cockroach.Inputs.CmekAdditionalRegion>
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
Status string
Aggregated status of the cluster's encryption key(s).
ClusterId This property is required. string
Cluster ID.
Regions This property is required. []CmekRegionArgs
AdditionalRegions []CmekAdditionalRegionArgs
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
Status string
Aggregated status of the cluster's encryption key(s).
clusterId This property is required. String
Cluster ID.
regions This property is required. List<CmekRegion>
additionalRegions List<CmekAdditionalRegion>
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
status String
Aggregated status of the cluster's encryption key(s).
clusterId This property is required. string
Cluster ID.
regions This property is required. CmekRegion[]
additionalRegions CmekAdditionalRegion[]
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
status string
Aggregated status of the cluster's encryption key(s).
cluster_id This property is required. str
Cluster ID.
regions This property is required. Sequence[CmekRegionArgs]
additional_regions Sequence[CmekAdditionalRegionArgs]
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
status str
Aggregated status of the cluster's encryption key(s).
clusterId This property is required. String
Cluster ID.
regions This property is required. List<Property Map>
additionalRegions List<Property Map>
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
status String
Aggregated status of the cluster's encryption key(s).

Outputs

All input properties are implicitly available as output properties. Additionally, the Cmek resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing Cmek Resource

Get an existing Cmek resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: CmekState, opts?: CustomResourceOptions): Cmek
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        additional_regions: Optional[Sequence[CmekAdditionalRegionArgs]] = None,
        cluster_id: Optional[str] = None,
        regions: Optional[Sequence[CmekRegionArgs]] = None,
        status: Optional[str] = None) -> Cmek
func GetCmek(ctx *Context, name string, id IDInput, state *CmekState, opts ...ResourceOption) (*Cmek, error)
public static Cmek Get(string name, Input<string> id, CmekState? state, CustomResourceOptions? opts = null)
public static Cmek get(String name, Output<String> id, CmekState state, CustomResourceOptions options)
resources:  _:    type: cockroach:Cmek    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AdditionalRegions List<Pulumiverse.Cockroach.Inputs.CmekAdditionalRegion>
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
ClusterId string
Cluster ID.
Regions List<Pulumiverse.Cockroach.Inputs.CmekRegion>
Status string
Aggregated status of the cluster's encryption key(s).
AdditionalRegions []CmekAdditionalRegionArgs
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
ClusterId string
Cluster ID.
Regions []CmekRegionArgs
Status string
Aggregated status of the cluster's encryption key(s).
additionalRegions List<CmekAdditionalRegion>
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
clusterId String
Cluster ID.
regions List<CmekRegion>
status String
Aggregated status of the cluster's encryption key(s).
additionalRegions CmekAdditionalRegion[]
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
clusterId string
Cluster ID.
regions CmekRegion[]
status string
Aggregated status of the cluster's encryption key(s).
additional_regions Sequence[CmekAdditionalRegionArgs]
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
cluster_id str
Cluster ID.
regions Sequence[CmekRegionArgs]
status str
Aggregated status of the cluster's encryption key(s).
additionalRegions List<Property Map>
Once CMEK is enabled for a cluster, no new regions can be added to the cluster resource, since they need encryption key info stored in the CMEK resource. New regions can be added and maintained here instead.
clusterId String
Cluster ID.
regions List<Property Map>
status String
Aggregated status of the cluster's encryption key(s).

Supporting Types

CmekAdditionalRegion
, CmekAdditionalRegionArgs

Name This property is required. string
Name of the region. Should match the region code used by the cluster's cloud provider.
InternalDns string
Internal DNS name of the cluster within the cloud provider's network. Used to connect to the cluster with PrivateLink or VPC peering.
NodeCount int
Number of nodes in the region. Valid for Advanced clusters only.
Primary bool
Set to true to mark this region as the primary for a serverless cluster. Exactly one region must be primary. Dedicated clusters expect to have no primary region.
SqlDns string
DNS name of the cluster's SQL interface. Used to connect to the cluster with IP allowlisting.
UiDns string
DNS name used when connecting to the DB Console for the cluster.
Name This property is required. string
Name of the region. Should match the region code used by the cluster's cloud provider.
InternalDns string
Internal DNS name of the cluster within the cloud provider's network. Used to connect to the cluster with PrivateLink or VPC peering.
NodeCount int
Number of nodes in the region. Valid for Advanced clusters only.
Primary bool
Set to true to mark this region as the primary for a serverless cluster. Exactly one region must be primary. Dedicated clusters expect to have no primary region.
SqlDns string
DNS name of the cluster's SQL interface. Used to connect to the cluster with IP allowlisting.
UiDns string
DNS name used when connecting to the DB Console for the cluster.
name This property is required. String
Name of the region. Should match the region code used by the cluster's cloud provider.
internalDns String
Internal DNS name of the cluster within the cloud provider's network. Used to connect to the cluster with PrivateLink or VPC peering.
nodeCount Integer
Number of nodes in the region. Valid for Advanced clusters only.
primary Boolean
Set to true to mark this region as the primary for a serverless cluster. Exactly one region must be primary. Dedicated clusters expect to have no primary region.
sqlDns String
DNS name of the cluster's SQL interface. Used to connect to the cluster with IP allowlisting.
uiDns String
DNS name used when connecting to the DB Console for the cluster.
name This property is required. string
Name of the region. Should match the region code used by the cluster's cloud provider.
internalDns string
Internal DNS name of the cluster within the cloud provider's network. Used to connect to the cluster with PrivateLink or VPC peering.
nodeCount number
Number of nodes in the region. Valid for Advanced clusters only.
primary boolean
Set to true to mark this region as the primary for a serverless cluster. Exactly one region must be primary. Dedicated clusters expect to have no primary region.
sqlDns string
DNS name of the cluster's SQL interface. Used to connect to the cluster with IP allowlisting.
uiDns string
DNS name used when connecting to the DB Console for the cluster.
name This property is required. str
Name of the region. Should match the region code used by the cluster's cloud provider.
internal_dns str
Internal DNS name of the cluster within the cloud provider's network. Used to connect to the cluster with PrivateLink or VPC peering.
node_count int
Number of nodes in the region. Valid for Advanced clusters only.
primary bool
Set to true to mark this region as the primary for a serverless cluster. Exactly one region must be primary. Dedicated clusters expect to have no primary region.
sql_dns str
DNS name of the cluster's SQL interface. Used to connect to the cluster with IP allowlisting.
ui_dns str
DNS name used when connecting to the DB Console for the cluster.
name This property is required. String
Name of the region. Should match the region code used by the cluster's cloud provider.
internalDns String
Internal DNS name of the cluster within the cloud provider's network. Used to connect to the cluster with PrivateLink or VPC peering.
nodeCount Number
Number of nodes in the region. Valid for Advanced clusters only.
primary Boolean
Set to true to mark this region as the primary for a serverless cluster. Exactly one region must be primary. Dedicated clusters expect to have no primary region.
sqlDns String
DNS name of the cluster's SQL interface. Used to connect to the cluster with IP allowlisting.
uiDns String
DNS name used when connecting to the DB Console for the cluster.

CmekRegion
, CmekRegionArgs

Key This property is required. Pulumiverse.Cockroach.Inputs.CmekRegionKey
Region This property is required. string
Cloud provider region code.
Status string
Describes the status of the current encryption key within the region.
Key This property is required. CmekRegionKey
Region This property is required. string
Cloud provider region code.
Status string
Describes the status of the current encryption key within the region.
key This property is required. CmekRegionKey
region This property is required. String
Cloud provider region code.
status String
Describes the status of the current encryption key within the region.
key This property is required. CmekRegionKey
region This property is required. string
Cloud provider region code.
status string
Describes the status of the current encryption key within the region.
key This property is required. CmekRegionKey
region This property is required. str
Cloud provider region code.
status str
Describes the status of the current encryption key within the region.
key This property is required. Property Map
region This property is required. String
Cloud provider region code.
status String
Describes the status of the current encryption key within the region.

CmekRegionKey
, CmekRegionKeyArgs

AuthPrincipal This property is required. string
Principal to authenticate as in order to access the key.
Type This property is required. string
Type of encryption key. Current allowed values are:

  • AWS_KMS
  • GCP_CLOUD_KMS
  • NULL_KMS
Uri This property is required. string
Provider-specific URI pointing to the encryption key.
CreatedAt string
Indicates when the key was created.
Status string
Current status of this key.
UpdatedAt string
Indicates when the key was last updated.
UserMessage string
Elaborates on the key's status and hints at how to fix issues that may have occurred during asynchronous key operations.
AuthPrincipal This property is required. string
Principal to authenticate as in order to access the key.
Type This property is required. string
Type of encryption key. Current allowed values are:

  • AWS_KMS
  • GCP_CLOUD_KMS
  • NULL_KMS
Uri This property is required. string
Provider-specific URI pointing to the encryption key.
CreatedAt string
Indicates when the key was created.
Status string
Current status of this key.
UpdatedAt string
Indicates when the key was last updated.
UserMessage string
Elaborates on the key's status and hints at how to fix issues that may have occurred during asynchronous key operations.
authPrincipal This property is required. String
Principal to authenticate as in order to access the key.
type This property is required. String
Type of encryption key. Current allowed values are:

  • AWS_KMS
  • GCP_CLOUD_KMS
  • NULL_KMS
uri This property is required. String
Provider-specific URI pointing to the encryption key.
createdAt String
Indicates when the key was created.
status String
Current status of this key.
updatedAt String
Indicates when the key was last updated.
userMessage String
Elaborates on the key's status and hints at how to fix issues that may have occurred during asynchronous key operations.
authPrincipal This property is required. string
Principal to authenticate as in order to access the key.
type This property is required. string
Type of encryption key. Current allowed values are:

  • AWS_KMS
  • GCP_CLOUD_KMS
  • NULL_KMS
uri This property is required. string
Provider-specific URI pointing to the encryption key.
createdAt string
Indicates when the key was created.
status string
Current status of this key.
updatedAt string
Indicates when the key was last updated.
userMessage string
Elaborates on the key's status and hints at how to fix issues that may have occurred during asynchronous key operations.
auth_principal This property is required. str
Principal to authenticate as in order to access the key.
type This property is required. str
Type of encryption key. Current allowed values are:

  • AWS_KMS
  • GCP_CLOUD_KMS
  • NULL_KMS
uri This property is required. str
Provider-specific URI pointing to the encryption key.
created_at str
Indicates when the key was created.
status str
Current status of this key.
updated_at str
Indicates when the key was last updated.
user_message str
Elaborates on the key's status and hints at how to fix issues that may have occurred during asynchronous key operations.
authPrincipal This property is required. String
Principal to authenticate as in order to access the key.
type This property is required. String
Type of encryption key. Current allowed values are:

  • AWS_KMS
  • GCP_CLOUD_KMS
  • NULL_KMS
uri This property is required. String
Provider-specific URI pointing to the encryption key.
createdAt String
Indicates when the key was created.
status String
Current status of this key.
updatedAt String
Indicates when the key was last updated.
userMessage String
Elaborates on the key's status and hints at how to fix issues that may have occurred during asynchronous key operations.

Import

format: 

$ pulumi import cockroach:index/cmek:Cmek advanced 1f69fdd2-600a-4cfc-a9ba-16995df0d77d
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
cockroach pulumiverse/pulumi-cockroach
License
Apache-2.0
Notes
This Pulumi package is based on the cockroach Terraform Provider.
CockroachDB v0.9.4 published on Friday, Mar 21, 2025 by pulumiverse
pulumiverse/pulumi-cockroach