Function main

kms/createKeyHsm.js:17–64

(
  projectId = 'my-project',
  locationId = 'us-east1',
  keyRingId = 'my-key-ring',
  id = 'my-hsm-encryption-key'
)

'use strict';

async function main(
  projectId = 'my-project',
  locationId = 'us-east1',
  keyRingId = 'my-key-ring',
  id = 'my-hsm-encryption-key'
) {
  // [START kms_create_key_hsm]
  //
  // TODO(developer): Uncomment these variables before running the sample.
  //
  // const projectId = 'my-project';
  // const locationId = 'us-east1';
  // const keyRingId = 'my-key-ring';
  // const id = 'my-hsm-encryption-key';

  // Imports the Cloud KMS library
  const {KeyManagementServiceClient} = require('@google-cloud/kms');

  // Instantiates a client
  const client = new KeyManagementServiceClient();

  // Build the parent key ring name
  const keyRingName = client.keyRingPath(projectId, locationId, keyRingId);

  async function createKeyHsm() {
    const [key] = await client.createCryptoKey({
      parent: keyRingName,
      cryptoKeyId: id,
      cryptoKey: {
        purpose: 'ENCRYPT_DECRYPT',
        versionTemplate: {
          algorithm: 'GOOGLE_SYMMETRIC_ENCRYPTION',
          protectionLevel: 'HSM',
        },

        // Optional: customize how long key versions should be kept before
        // destroying.
        destroyScheduledDuration: {seconds: 60 * 60 * 24},
      },
    });

    console.log(`Created hsm key: ${key.name}`);
    return key;
  }

  return createKeyHsm();
  // [END kms_create_key_hsm]
}
module.exports.main = main;

/* c8 ignore next 10 */