catalog logoThe IAM Privilege Catalog

services / Google Cloud / Cloud KMS Import Jobs

A Cloud KMS import job is used to create KMS Crypto Keys and Crypto Key Versions using pre-existing key material.

cloudkms.​importJobs.​setIamPolicy

Risks

  1. Policy destruction (CRITICAL)
  2. Privilege escalation (CRITICAL)
  3. Denial-of-access (EVASION)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

  • https:​/​/​cloud.​google.​com/​kms/​docs/​reference/​rest/​v1/​projects.​locations.​keyRings.​importJobs

    • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog