October 2019
Intermediate to advanced
520 pages
13h 5m
English
GCP offers additional methods for managing encryption keys that might fit better with customer security policies.
GCP offers the ability for the customer to manage KEKs, allowing us to control the generation of keys, the rotation of keys, and the expiration of a key. Keys will still be stored in KMS, but we will have control of their life cycle. This is known as CMEK. In order to organize keys effectively, Google Cloud KMS uses the concept of key rings to group keys together and push inherited permissions to keys.
We can create our key through a number of steps. Let's get started:
Read now
Unlock full access