> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/gcp-identities/kms-keys.md).

# KMS Keys

The **KMS Keys** page provides a list of enumerated Cloud KMS cryptographic keys in GCP.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-867eb49216b261f984e6274cea1d6639f0c24673%2FGCPKMSKeyListPage.png?alt=media" alt=""><figcaption><p>KMS Keys</p></figcaption></figure>

### KMS Keys Details

The Details page includes the **`Details`** and **`Metadata`** tabs, and a **`Graph »`** button for enhanced navigation and analysis.

{% hint style="info" %}
You can analyze objects in the `Graph module` by clicking the **`Graph »`** button on the upper right side.
{% endhint %}

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-c80ad65575e5b82a2e85a950a50ed8725abd9d2e%2FGCPKMSKeyDetailPage.png?alt=media" alt=""><figcaption><p>GCP KMSKey Details</p></figcaption></figure>

The Details tab contains attributes about the GCP KMS Key. The page also includes an **Issues** panel that lists any security findings related to the key, along with a Risk score and Exposure Point.

### Information

| Attribute                  | Description                                                                                                                                                 |
| -------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name                       | The full resource path of the key (e.g., `projects/management-project-486413/locations/northamerica-northeast1/keyRings/deneme-key/cryptoKeys/deneme-key`). |
| Display Name               | The human-readable name of the key.                                                                                                                         |
| Project ID                 | The ID of the project the key belongs to.                                                                                                                   |
| Primary Version State      | The state of the primary key version (e.g., `ENABLED`).                                                                                                     |
| Purpose                    | The cryptographic purpose of the key (e.g., `ENCRYPT_DECRYPT`).                                                                                             |
| Rotation Period            | The configured automatic rotation interval for the key, if set.                                                                                             |
| Destroy Scheduled Duration | The duration before a scheduled key version destruction takes effect.                                                                                       |
| Import Only                | Indicates whether the key only accepts imported key material.                                                                                               |
| Create Time                | The timestamp when the key was created.                                                                                                                     |
| Update Time                | The timestamp of the last update to the key.                                                                                                                |
| Next Rotation Time         | The scheduled time of the next automatic key rotation.                                                                                                      |
| Full Resource Name         | The fully-qualified resource name, including the API service (e.g., `//cloudkms.googleapis.com/...`).                                                       |
| Parent Project             | A link to the parent project the key belongs to.                                                                                                            |

#### **Metadata**

Displays additional metadata associated with the key.

#### **Issues**

Lists security findings associated with the key (e.g., *KMS Key Publicly Accessible*, *KMS Key Rotation Not Enabled*), each tagged with relevant categories such as Least Privilege, Data Protection, or Credential Security, and a severity rating (e.g., Critical, Medium).