Data Encryption techniques in Google Cloud (GMEK/CMEK/CSEK)

This article explains the importance of encryption at rest and encryption in transit for storing and transferring sensitive data in Google Cloud.

The three encryption methods available for data at rest are Google-managed encryption keys (GMEK), customer-managed encryption keys (CMEK), and customer-supplied encryption keys (CSEK).

The article also provides step-by-step instructions for encrypting data using CMEK and CSEK for various Google Cloud services, including compute disks and cloud storage buckets. Additionally, the article provides information on encryption in transit technologies, such as HTTPS, SSL/TLS, SSH, and VPN.