Provisions a CMEK key for use in a location of a customer's project. This method will also conduct location validation on the provided cmekConfig to make sure the key is valid and can be used in the selected location.
Required. The name of the CmekConfig of the form projects/{project}/locations/{location}/cmekConfig or projects/{project}/locations/{location}/cmekConfigs/{cmekConfig}.
Query parameters
Parameters
setDefault
boolean
Set the following CmekConfig as the default to be used for child resources if one is not specified.
Request body
The request body contains an instance of CmekConfig.
Response body
If successful, the response body contains an instance of Operation.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-27 UTC."],[[["\u003cp\u003eThis page details how to update a Customer-Managed Encryption Key (CMEK) configuration for a specific location within a project.\u003c/p\u003e\n"],["\u003cp\u003eThe process uses a PATCH HTTP request to the specified URL, following gRPC Transcoding syntax, to modify the CMEK configuration.\u003c/p\u003e\n"],["\u003cp\u003eA request requires a designated \u003ccode\u003econfig.name\u003c/code\u003e parameter in the path, along with an optional \u003ccode\u003esetDefault\u003c/code\u003e boolean parameter in the query.\u003c/p\u003e\n"],["\u003cp\u003eThe request body requires a \u003ccode\u003eCmekConfig\u003c/code\u003e instance, and a successful response will include an \u003ccode\u003eOperation\u003c/code\u003e instance.\u003c/p\u003e\n"],["\u003cp\u003eUpdating the CMEK configuration requires the OAuth scope \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e and the IAM permission \u003ccode\u003ediscoveryengine.cmekConfigs.update\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,["# Method: projects.locations.updateCmekConfig\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Query parameters](#body.QUERY_PARAMETERS)\n- [Request body](#body.request_body)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [IAM Permissions](#body.aspect_1)\n\nProvisions a CMEK key for use in a location of a customer's project. This method will also conduct location validation on the provided cmekConfig to make sure the key is valid and can be used in the selected location.\n\n### HTTP request\n\n`PATCH https://discoveryengine.googleapis.com/v1/{config.name=projects/*/locations/*/cmekConfig}`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Path parameters\n\n### Query parameters\n\n### Request body\n\nThe request body contains an instance of [CmekConfig](/generative-ai-app-builder/docs/reference/rest/v1/projects.locations.cmekConfigs#CmekConfig).\n\n### Response body\n\nIf successful, the response body contains an instance of [Operation](/generative-ai-app-builder/docs/reference/rest/Shared.Types/ListOperationsResponse#Operation).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp).\n\n### IAM Permissions\n\nRequires the following [IAM](https://cloud.google.com/iam/docs) permission on the `name` resource:\n\n- `discoveryengine.cmekConfigs.update`\n\nFor more information, see the [IAM documentation](https://cloud.google.com/iam/docs)."]]
