Editing or deleting a key ring from the console

Question

This a newbie security/console question...I created a key ring in my project in a specific (wrong) location, Europe.

I can't see any way in the console to edit or even delete a key ring. The key ring is completely empty...no keys in it.

How can I edit/delete a key ring?

Answer 1

Sorry, you can't delete or rename keys or key rings. We were concerned about the security implications of allowing multiple keys or key versions over time to have the same resource name, so we decided to make names immutable. (And you can't delete them, because we wouldn't be able to do a true deletion--there would still have to be a tombstone tracking that this name had been used and couldn't be reused).

We're aware that this can make things untidy, but we have no immediate plans to change this.

If you want to avoid getting billed for a key or otherwise make it unavailable, you can do so by deleting all the key versions; neither keys nor key rings are billed for, just the active key versions within the keys.

Thanks for your question and for using GCP and Cloud KMS!