A
KeyAccessJustificationsPolicy
specifies zero or more allowed
AccessReason values for encrypt,
decrypt, and sign operations on a
CryptoKey or
KeyAccessJustificationsPolicyConfig
(the default Key Access Justifications policy).
Attribute
Name
Description
allowed_access_reasons
MutableSequence[google.cloud.kms_v1.types.AccessReason]
The list of allowed reasons for access to a
CryptoKey. Note that empty
allowed_access_reasons has a different meaning depending on
where this message appears. If this is under
KeyAccessJustificationsPolicyConfig,
it means allow-all. If this is under
CryptoKey, it means
deny-all.
