customer-supplied encryption keys (CSEK)
GPTKB entity
Statements (20)
Predicate | Object |
---|---|
gptkbp:instanceOf |
encryption key management method
|
gptkbp:alternativeTo |
gptkb:customer-managed_encryption_keys_(CMEK)
Google-managed encryption keys |
gptkbp:documentation |
https://cloud.google.com/docs/security/encryption/default-encryption#csek
|
gptkbp:enables |
customer control over encryption keys
|
https://www.w3.org/2000/01/rdf-schema#label |
customer-supplied encryption keys (CSEK)
|
gptkbp:keyFormat |
256-bit AES key
|
gptkbp:notStoredBy |
gptkb:Google
|
gptkbp:requires |
customer to manage key lifecycle
customer to provide key with each request |
gptkbp:riskFactor |
data inaccessibility if key is incorrect
data loss if key is lost |
gptkbp:supportedBy |
gptkb:Google_Cloud_Storage
gptkb:Google_Compute_Engine gptkb:Google_Persistent_Disk |
gptkbp:supportsAlgorithm |
symmetric key encryption
|
gptkbp:usedFor |
data encryption
|
gptkbp:usedIn |
gptkb:Google_Cloud_Platform
|
gptkbp:bfsParent |
gptkb:Cloud_Key_Management_Service
|
gptkbp:bfsLayer |
5
|