From the course: Google Cloud Associate Cloud Engineer Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Managing and securing objects in and between cloud storage buckets

Managing and securing objects in and between cloud storage buckets - Google Cloud Tutorial

From the course: Google Cloud Associate Cloud Engineer Cert Prep

Start my 1-month free trial Buy for my team

Managing and securing objects in and between cloud storage buckets

“

- Managing and securing objects in between cloud storage buckets. So, let's take a look at how Google Cloud handles encryption at rest and in transit. So, this is the Google Cloud documentation where it explains how encryption is handled at rest. So here, it says that, "We at Google encrypt all Google customer content at rest, without any action required by you, using one or more encryption mechanisms." It also says that, "All data that is stored by Google is encrypted at the storage layer using the Advanced Encryption Standard, specifically the AES-256 algorithm." Here, there are some more details as well about the encryption mechanisms. Google uses an envelope encryption method, which means that first, there is a Data Encryption Key or DEK that encrypts the data and is stored close to the data physically. And then, there is a Key Encryption Key or KEK for short, which encrypts the data key. And that one is stored in a Key Management System. And if the customer opts to manage it…

Contents