Cloud KMS is GCP's key management service, which generates, rotates, and destroys AES256 encryption keys. Coupled with IAM and Cloud Audit Logging, we can provide granular access at a key level and monitor their usage. We can use the KMS feature via API calls and client libraries for different languages. In this recipe, we'll use KMS to encrypt a small piece of sensitive data using Google's command-line tools. This will show us the ease of use of Cloud KMS and the absence of any overhead of managing keys or encryption libraries.
Securing financial data using Cloud KMS
Get Google Cloud Platform Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
