GCP Key Management Servicer plugin requires following configuration settings:

Parameter

Description

Example

projectId

GCP Project ID to scan

my-gcp-project

location

GCP location to scan

global, us-central1

privateKey

Service account private key in PEM format

-----BEGIN PRIVATE KEY-----...

clientEmail

Service account email address

kms-discovery@project.iam.gserviceaccount.com

clientId

OAuth2 client ID (metadata only)

111813473337277308137

clientX509CertUrl

OAuth2 client certificate URL (metadata only)

https://www.googleapis.com/robot/v1/metadata/x509/...