---
title: "Get Key Metadata"
method: GET
path: "/v4/organizations/{organizationId}/cmek/{cmekId}"
tags: ["CMEK"]
---

# Get Key Metadata

`GET /v4/organizations/{organizationId}/cmek/{cmekId}`

## Request

- Base URL: `https://cloudapi.cloud.couchbase.com`
- URL: `https://cloudapi.cloud.couchbase.com/v4/organizations/{organizationId}/cmek/{cmekId}`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/couchbase/apis/couchbase-capella-management-api/docs/v4/organizations/:organizationId/cmek/:cmekId/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieves the full metadata details for a specific customer-managed encryption key within the organization.

In order to access this endpoint, the provided API key must have at least one of the following roles:
 - Organization Owner
 - Organization Member

To learn more, see [Organization, Project, and Database Access Overview](https://docs.couchbase.com/cloud/organizations/organization-projects-overview.html).

## Response `200`

Successfully fetched the encryption key details based on its ID.

- GetCMEKMetadata
  - `id` string, uuid, required: The unique identifier of the key.
  - `name` string, required: Name of the key.
  - `description` string, required: Description of the Key.
  - `config` union, required
    - AWSConfig
      - `arn` string, required: The Amazon Resource Name (ARN) that uniquely identifies the AWS KMS key.
    - GCPConfig
      - `resourceName` string, required: The unique identifier for a GCP resource, specifying the project, location, key ring, and the key within Cloud KMS.
    - AzureConfig
      - `keyLocation` string, required: The URL of the Azure key.
      - `region` string, required: The region of the Azure key.
  - `audit` CouchbaseAuditData, required
    - `createdBy` string, required: The user who created the resource; this will be a UUID4 ID for standard users and will be a string such as "internal-support" for internal Couchbase support users.
    - `createdAt` string, date-time, required: The RFC3339 timestamp associated with when the resource was initially created.
    - `modifiedBy` string, required: The user who last modified the resource; this will be a UUID4 ID for standard users and will be a string such as "internal-support" for internal Couchbase support users.
    - `modifiedAt` string, date-time, required: The RFC3339 timestamp associated with when the resource was last modified.
    - `version` integer, required: The version of the document. This value is incremented each time the resource is modified.

## Other responses

- `403`: The client does not have the necessary permissions to access this resource.
- `404`: The requested resource was not found.
- `429`: Returned when the client exceeds the rate limit for the given APIKey.
- `500`: An unexpected error occurred in the server while processing this request.

---

[API](https://skmtc.dev/couchbase/apis/couchbase-capella-management-api.md) - [All operations](https://skmtc.dev/couchbase/apis/couchbase-capella-management-api/llms.txt) - [OpenAPI document](https://skmtc.dev/couchbase/apis/couchbase-capella-management-api/revisions/fcc4f29578b1?raw)