# The CustomerManagedKey object

## Attributes

- `customer_managed_key_id` (string)
  ID of the encryption key configuration object.
- `creation_time` (int64)
  Time in epoch milliseconds when the customer key was created.
- `account_id` (string)
  The <Databricks> account ID that holds the customer-managed key.
- `aws_key_info` (object)
  - `key_arn` (string)
    The AWS KMS key's Amazon Resource Name (ARN).
    Example: `arn:aws:kms:us-west-2:111122223333:key/0987dcba-09fe-87dc-65ba-ab0987654321`
  - `key_alias` (string)
    The AWS KMS key alias.
    Example: `alias/projectKey1`
  - `key_region` (string)
    The AWS KMS key region.
    Example: `us-east-1`
  - `reuse_key_for_cluster_volumes` (boolean)
    This field applies only if the `use_cases` property includes `STORAGE`. If this is set to true or omitted, the key is also used to encrypt 
     cluster EBS volumes. If you do not want to use this key for encrypting EBS volumes, set to false.
    Example: `true`
- `gcp_key_info` (object)
  - `kms_key_id` (string)
    Globally unique kms key resource id of the form
     projects/testProjectId/locations/us-east4/keyRings/gcpCmkKeyRing/cryptoKeys/cmk-eastus4
  - `gcp_service_account` (object)
    Globally unique service account email that has access to the KMS key.
     The service account exists within the Databricks CP project.
    - `service_account_email` (string)
- `use_cases` (array of string)
  The cases that the key can be used for.
  Possible values: `MANAGED_SERVICES`, `STORAGE`

## Example

```json
{
  "customer_managed_key_id": "string",
  "creation_time": 0,
  "account_id": "string",
  "aws_key_info": {
    "key_arn": "arn:aws:kms:us-west-2:111122223333:key/0987dcba-09fe-87dc-65ba-ab0987654321",
    "key_alias": "alias/projectKey1",
    "key_region": "us-east-1",
    "reuse_key_for_cluster_volumes": true
  },
  "gcp_key_info": {
    "kms_key_id": "string",
    "gcp_service_account": {}
  },
  "use_cases": [
    "string"
  ]
}
```