text: # Copyright 2020 Google LLC
  #
  # Licensed under the Apache License, Version 2.0 (the "License");
  # you may not use this file except in compliance with the License.
  # You may obtain a copy of the License at
  #
  #     http://www.apache.org/licenses/LICENSE-2.0
  #
  # Unless required by applicable law or agreed to in writing, software
  # distributed under the License is distributed on an "AS IS" BASIS,
  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  # See the License for the specific language governing permissions and
  
  
  # [START kms_create_key_rotation_schedule]
  def create_key_rotation_schedule(project_id, location_id, key_ring_id, key_id):
      """
      Creates a new key in Cloud KMS that automatically rotates.
  
      Args:
          project_id (string): Google Cloud project ID (e.g. 'my-project').
          location_id (string): Cloud KMS location (e.g. 'us-east1').
          key_ring_id (string): ID of the Cloud KMS key ring (e.g. 'my-key-ring').
          key_id (string): ID of the key to create (e.g. 'my-rotating-key').
  
      Returns:
          CryptoKey: Cloud KMS key.
  
      """
  
      # Import the client library.
      from google.cloud import kms
  
      # Import time for getting the current time.
      import time
  
      # Create the client.
      client = kms.KeyManagementServiceClient()
  
      # Build the parent key ring name.
      key_ring_name = client.key_ring_path(project_id, location_id, key_ring_id)
  
      # Build the key.
      purpose = kms.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
      algorithm = kms.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
      key = {
          'purpose': purpose,
          'version_template': {
              'algorithm': algorithm,
          },
  
          # Rotate the key every 30 days.
          'rotation_period': {
              'seconds': 60 * 60 * 24 * 30
          },
  
          # Start the first rotation in 24 hours.
          'next_rotation_time': {
              'seconds': int(time.time()) + 60 * 60 * 24
          }
      }
  
      # Call the API.
      created_key = client.create_crypto_key(
          request={'parent': key_ring_name, 'crypto_key_id': key_id, 'crypto_key': key})
      print('Created labeled key: {}'.format(created_key.name))
      return created_key
  # [END kms_create_key_rotation_schedule]
  