update compute disk documentation to show required permissions to use…

… kms_key_name
GoogleCloudPlatform · Dec 9, 2019 · a550768 · a550768
1 parent e4c7945
commit a550768
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/products/compute/api.yaml b/products/compute/api.yaml
@@ -2628,6 +2628,9 @@ objects:
             name: 'kmsKeyName'
             description: |
               The name of the encryption key that is stored in Google Cloud KMS.
+              Your project's Compute Engine System service account
+              (`service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com`) must have
+              `roles/cloudkms.cryptoKeyEncrypterDecrypter` to use this feature.
         input: true
       - !ruby/object:Api::Type::ResourceRef
         name: 'sourceSnapshot'