Using Customer-Managed Encryption Keys with Cloud Storage and Cloud KMS Reviews

Please consider adding task for re-encrypting file with new/rotated CMEK, similar to "gsutil rewrite -k gs://$BUCKET_NAME/OBJECT_NAME" CSEK

Leonid L. · Reviewed over 5 years ago

This command didn't work: "https://cloudkms.googleapis.com/v1/projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings/$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_1_NAME:encrypt" \ -d "{\"WWFra28gV2Fra28gYW5kIERvdA==\":\"WWFra28gV2Fra28gYW5kIERvdA==\"}" \ -H "Authorization:Bearer $(gcloud auth application-default \ print-access-token)" \ -H "Content-Type: application/json" I replaced the "plaintext" variable with the base 64 code as instructed

Seth H. · Reviewed over 5 years ago

LTI S. · Reviewed over 5 years ago

Ce X. · Reviewed over 5 years ago

Ravi T. · Reviewed over 5 years ago

Espartaco G. · Reviewed over 5 years ago

Toni V. · Reviewed over 5 years ago

Willibrod N. · Reviewed over 5 years ago

Eric B. · Reviewed over 5 years ago

Rodolfo S. · Reviewed over 5 years ago

Aditya B. · Reviewed over 5 years ago

Shalva K. · Reviewed over 5 years ago

LIM E. · Reviewed over 5 years ago

Rishalin P. · Reviewed over 5 years ago

Tom D. · Reviewed over 5 years ago

Wawrzyniec W. · Reviewed over 5 years ago

Seema S. · Reviewed over 5 years ago

Mustafa K. · Reviewed over 5 years ago

Findlay L. · Reviewed over 5 years ago

Thibault P. · Reviewed over 5 years ago

Marjorie Mae C. · Reviewed over 5 years ago

Vanessa P. · Reviewed over 5 years ago

Mark Evans A. · Reviewed over 5 years ago

Sheen C. · Reviewed over 5 years ago

poxstone p. · Reviewed over 5 years ago