IAM Role: GCP/KMS/Metadata
| Permission | Grant |
|---|---|
| cloudkms.cryptoKeyVersions.get | Metadata |
| cloudkms.cryptoKeyVersions.list | Metadata |
| cloudkms.cryptoKeyVersions.viewPublicKey | Metadata |
| cloudkms.cryptoKeys.get | Metadata |
| cloudkms.cryptoKeys.getIamPolicy | Metadata |
| cloudkms.cryptoKeys.list | Metadata |
| cloudkms.keyRings.get | Metadata |
| cloudkms.keyRings.getIamPolicy | Metadata |
| cloudkms.keyRings.list | Metadata |