Files
cheatsheet-tldr/tldr/gcloud-kms-decrypt
2025-12-20 00:20:53 +00:00

19 lines
823 B
Plaintext

---
syntax: markdown
tags: [tldr, common]
source: https://github.com/tldr-pages/tldr.git
---
# gcloud kms decrypt
> Decrypt a ciphertext file using a Cloud KMS key.
> See also: `gcloud`.
> More information: <https://docs.cloud.google.com/sdk/gcloud/reference/kms/decrypt>.
- Decrypt a file using a specified key, key ring, and location:
`gcloud kms decrypt --key={{key_name}} --keyring={{keyring_name}} --location={{global}} --ciphertext-file={{path/to/ciphertext}} --plaintext-file={{path/to/plaintext}}`
- Decrypt a file with additional authenticated data (AAD) and write the decrypted plaintext to `stdout`:
`gcloud kms decrypt --key={{key_name}} --keyring={{keyring_name}} --location={{global}} --additional-authenticated-data-file={{path/to/file.aad}} --ciphertext-file={{path/to/ciphertext}} --plaintext-file=-`