March 2019
Beginner to intermediate
778 pages
34h 20m
English
Like other GCP products, all Cloud Storage data is fully encrypted at rest. This means that a malicious actor that gains access to the underlying resources of your Cloud Storage buckets will still not be able to read the data. It does not, however, solve the issues outlined previously. If a Cloud Storage Viewer's account becomes compromised, the data can still be accessed.
A solution to this issue is customer-supplied encryption keys. When creating buckets and objects, you can optionally provide an AES 256 bit encryption key. Cloud Storage will use this key to encrypt data, and the key must be used in order to later access that data. Cloud Storage does not maintain a copy of this key, meaning there's nothing ...
Read now
Unlock full access