diff --git a/.changelog/3624.txt b/.changelog/3624.txt
new file mode 100644
index 0000000000..2d8fb1d352
--- /dev/null
+++ b/.changelog/3624.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+kms: fixed the `id` value in the `google_kms_crypto_key_version` datasource to include an `/v1` part following `//cloudkms.googleapis.com/`, making it useful for interpolation into Binary Authorization.
+```
diff --git a/google-beta/data_source_google_kms_crypto_key_version.go b/google-beta/data_source_google_kms_crypto_key_version.go
index cee92f0253..af279db927 100644
--- a/google-beta/data_source_google_kms_crypto_key_version.go
+++ b/google-beta/data_source_google_kms_crypto_key_version.go
@@ -117,7 +117,7 @@ func dataSourceGoogleKmsCryptoKeyVersionRead(d *schema.ResourceData, meta interf
 			return fmt.Errorf("Error reading CryptoKeyVersion public key: %s", err)
 		}
 	}
-	d.SetId(fmt.Sprintf("//cloudkms.googleapis.com/%s/cryptoKeyVersions/%d", d.Get("crypto_key"), d.Get("version")))
+	d.SetId(fmt.Sprintf("//cloudkms.googleapis.com/v1/%s/cryptoKeyVersions/%d", d.Get("crypto_key"), d.Get("version")))
 
 	return nil
 }
diff --git a/website/docs/d/google_kms_crypto_key_version.html.markdown b/website/docs/d/google_kms_crypto_key_version.html.markdown
index db8fd09103..7c37e240aa 100644
--- a/website/docs/d/google_kms_crypto_key_version.html.markdown
+++ b/website/docs/d/google_kms_crypto_key_version.html.markdown
@@ -47,6 +47,8 @@ The following arguments are supported:
 In addition to the arguments listed above, the following computed attributes are
 exported:
 
+* `id` - an identifier for the resource with format `//cloudkms.googleapis.com/v1/{{crypto_key}}/cryptoKeyVersions/{{version}}`
+
 * `state` - The current state of the CryptoKeyVersion. See the [state reference](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions#CryptoKeyVersion.CryptoKeyVersionState) for possible outputs.
 
 * `protection_level` - The ProtectionLevel describing how crypto operations are performed with this CryptoKeyVersion. See the [protection_level reference](https://cloud.google.com/kms/docs/reference/rest/v1/ProtectionLevel) for possible outputs.