Introduction IBM® Key Protect for IBM Cloud® helps you provision encrypted keys for apps across IBM Cloud. As you manage the lifecycle of your keys, you can benefit from knowing that your keys are secured by cloud-based FIPS 140-2 Level 3 hardware security modules HSMs that protect against the theft of information. Key Protect provides a REST API that you can use with any programming language to store, retrieve, and generate encryption keys. For details about using Key Protect, see the IBM Cloud docshttps://cloud.ibm.com/docs/key-protect/. API endpoint bash https://Method Path Summary POST /api/v2/keys Create a key GET /api/v2/keys List keys HEAD /api/v2/keys Retrieve key total POST /api/v2/keys_with_policy_overrides Create a key with policy overrides GET /api/v2/keys/{id} Retrieve a key POST /api/v2/keys/{id} Invoke an action on a key PATCH /api/v2/keys/{id} Update (patch) a key DELETE /api/v2/keys/{id} Delete a key GET /api/v2/keys/{id}/metadata Retrieve key metadata DELETE /api/v2/keys/{id}/purge Purge a deleted key POST /api/v2/keys/{id}/restore Restore a key GET /api/v2/keys/{id}/versions List key versions POST /api/v2/keys/{id}/actions/wrap Wrap a key POST /api/v2/keys/{id}/actions/unwrap Unwrap a key POST /api/v2/keys/{id}/actions/rewrap Rewrap a key POST /api/v2/keys/{id}/actions/rotate Rotate a key POST /api/v2/keys/{id}/actions/setKeyForDeletion Set a key for deletion POST /api/v2/keys/{id}/actions/unsetKeyForDeletion Unset a key for deletion POST /api/v2/keys/{id}/actions/enable Enable a key POST /api/v2/keys/{id}/actions/disable Disable a key POST /api/v2/keys/{id}/actions/sync Sync associated resources PUT /api/v2/keys/{id}/policies Set key policies GET /api/v2/keys/{id}/policies List key policies PUT /api/v2/instance/policies Set instance policies GET /api/v2/instance/policies List instance policies GET /api/v2/instance/allowed_ip_port Retrieve allowed IP port POST /api/v2/import_token Create an import token GET /api/v2/import_token Retrieve an import token GET /api/v2/keys/{id}/registrations List registrations for a key GET /api/v2/keys/registrations List registrations for any key POST /api/v2/keys/{id}/aliases/{alias} Create an alias DELETE /api/v2/keys/{id}/aliases/{alias} Delete an alias GET /api/v2/key_rings List key rings POST /api/v2/key_rings/{key-ring-id} Create a key ring DELETE /api/v2/key_rings/{key-ring-id} Delete key ring GET /api/v2/kmip_adapters List KMIP Adapters POST /api/v2/kmip_adapters Create a KMIP Adapter GET /api/v2/kmip_adapters/{id} Retrieve a KMIP Adapter DELETE /api/v2/kmip_adapters/{id} Delete a KMIP Adapter GET /api/v2/kmip_adapters/{adapter_id}/kmip_objects List KMIP objects of a KMIP Adapter GET /api/v2/kmip_adapters/{adapter_id}/kmip_objects/{id} Retrieve a KMIP object from a KMIP Adapter DELETE /api/v2/kmip_adapters/{adapter_id}/kmip_objects/{id} Delete a KMIP object from a KMIP Adapter GET /api/v2/kmip_adapters/{adapter_id}/certificates List client certificates of a KMIP Adapter POST /api/v2/kmip_adapters/{adapter_id}/certificates Add a client certificate to a KMIP Adapter GET /api/v2/kmip_adapters/{adapter_id}/certificates/{id} Retrieve a client certificate from a KMIP Adapter DELETE /api/v2/kmip_adapters/{adapter_id}/certificates/{id} Delete a client certificate from a KMIP Adapter