KeyAccessJustificationsPolicyConfig

Represents a singleton configuration for Key Access Justifications policies.

JSON representation 
{
  "name": string,
  "defaultKeyAccessJustificationPolicy": {
    object (KeyAccessJustificationsPolicy)
  },
  "defaultPolicyAvailable": boolean
}
Fields
name

string

Identifier. Represents the resource name for this KeyAccessJustificationsPolicyConfig in the format of "{organizations|folders|projects}/*/kajPolicyConfig".
defaultKeyAccessJustificationPolicy

object (KeyAccessJustificationsPolicy)

Optional. Specifies the default Key Access Justifications policy used when a CryptoKey is created in this folder. This is only used when a Key Access Justifications policy is not provided in the CreateCryptoKeyRequest. This overrides any default policies in its ancestry. If this field is unset, or is set but contains an empty allowedAccessReasons list, no default Key Access Justifications policy configuration is active. In this scenario, all newly created keys will default to an "allow-all" policy.
defaultPolicyAvailable

boolean

Output only. Indicates whether this parent resource is available to default policy feature. Please consult the prerequisite of default policy feature for more details.