gcp-kms-decrypt-plaintext-output
Cloud KMS decrypt returns plaintext bytes to the caller.
Where it sits
| location | cloudkms.projects.locations.keyRings.cryptoKeys.decrypt.plaintext |
|---|---|
| location kind | output_value |
| data kinds | credential encryption_key_material sensitive_data |
| emits edge | CanReadData |
| service | Cloud KMS (gcp:kms) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | cloudkms.projects.locations.keyRings.cryptoKeys.decrypt |
| response path | plaintext |
| encoding | base64 |
| params | {"name": "\u003cresource-name\u003e"} |
Required permissions
cloudkms.cryptoKeyVersions.useToDecrypt