Also read In Transit encryption GCP

Cloud Storage?

At rest encryption. Google Managed Keys (Native Google or CMEKs) or BYOK (CSEKs)

Cloud SQL?

Row Level Encryption

What if I don't want the default encryption keys?

You can use new, separate managed KMS keys (CMEKs) to perform the same at rest encryption.




Need an experienced Data Protection Expert?  Anuj has successfully delivered over a dozen deployments on each of the public clouds (AWS/GCP/Azure) including several DevSecOps engagements. Set up a time with Anuj Varma.