project - envlink

envctl project keys

envctl project keys

Project keys, wrapped by the organization's key, which kms:alias/envlink-root wraps:
  github.com/acme/app                              v1  created Oct 17 20:35

Shows names, versions and dates, never keys.

envctl project shred

envctl project shred <project> --yes

Destroys the project’s key, its snapshot records and its artifacts. Anything sealed under the key can never be read again, wherever a copy is. Without --yes, it explains and does nothing. Only admins can shred.