FIPS 140 Level 2 encryption requirements on GCP
Cloud KMS does not meet Level 2 Fips 140 requirements Only Cloud HSM does – and requires an on premises HSM solution.
Archive
Category: Encryption and Data Protection
Using CMEKs in GCP
If you use a CMEK, the CMEK is used to encrypt the Object Data, Object’s checksum and MD5 hash, but not the object name. The object name is…
Certificate Authority as a Service and VPC Service Controls GCP
Google Cloud Private CA and VPC Service Controls Certificate Authority Service and VPC Service Controls in Google Cloud Overview Google Cloud Certificate Authority Service provides a managed private…
Create your own Certificate Authority and Root Certificates
There is no excerpt because this is a protected post.
Why use a Customer Managed Key on AWS or GCP?
Why use a CMK on AWS ( a CMEK on GCP) at all, when the Cloud Provider managed keys will perform the same task? That’s a question a…
At Rest Encryption GCP
Also read In Transit encryption GCP Cloud Storage? At rest encryption. Google Managed Keys (Native Google or CMEKs) or BYOK (CSEKs) Cloud SQL? Row Level Encryption What if…