Control: GCP > KMS > Crypto Key > Labels

Take an action when an GCP KMS crypto key labels is not updated based on the GCP > KMS > Crypto Key > Labels > * policies.

If the resource is not updated with the labels defined in GCP > KMS > Crypto Key > Labels > Template, this control raises an alarm and takes the defined enforcement action.

See Labels for more information.

Resource Types

This control targets the following resource types:

GCP > KMS > Crypto Key

Policies

The following policies can be used to configure this control:

GCP > KMS > Crypto Key > Labels

This control type relies on these other policies when running actions:

GCP > KMS > Crypto Key > Labels > Template

Permissions

Cloud permissions used by this control and its actions:

cloudkms.cryptoKeys.update

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-kms#/control/types/cryptoKeyLabels

Category URI

tmod:@turbot/turbot#/control/categories/resourceTags

GraphQL

query controlType(id: "tmod:@turbot/gcp-kms#/control/types/cryptoKeyLabels") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-kms#/control/types/cryptoKeyLabels'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-kms#/control/types/cryptoKeyLabels"