---
title: "POST /v1/{+parent}/kmsConfigs"
method: POST
path: "/v1/{+parent}/kmsConfigs"
tags: ["projects"]
---

# POST /v1/{+parent}/kmsConfigs

`POST /v1/{+parent}/kmsConfigs`

Creates a new KMS config.

## Path parameters

- `parent` string, required

## Query parameters

- `kmsConfigId` string

## Request body

- KmsConfig — KmsConfig is the customer-managed encryption key(CMEK) configuration.
  - `stateDetails` string — Output only. State details of the KmsConfig.
  - `createTime` string, google-datetime — Output only. Create time of the KmsConfig.
  - `labels` object — Labels as key value pairs
  - `cryptoKeyName` string — Required. Customer-managed crypto key resource full name. Format: `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`
  - `serviceAccount` string — Output only. The Service account which will have access to the customer provided encryption key.
  - `name` string — Identifier. Name of the `KmsConfig`. Format: `projects/{project}/locations/{location}/kmsConfigs/{kms_config}`
  - `instructions` string — Output only. Instructions to provide the access to the customer provided encryption key.
  - `state` 'STATE_UNSPECIFIED' | 'READY' | 'CREATING' | 'DELETING' | 'UPDATING' | 'IN_USE' | 'ERROR' | 'KEY_CHECK_PENDING' | 'KEY_NOT_REACHABLE' | 'DISABLING' | 'DISABLED' | 'MIGRATING' — Output only. State of the KmsConfig.
  - `description` string — Description of the KmsConfig.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/netapp.md) · [All operations](https://skmtc.net/google/apis/netapp/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/netapp/versions/fa9ebea9e9dc/schema)