Using Customer-Managed Encryption Keys with Cloud Storage and Cloud KMS Reviews

Brandon K. · Reviewed about 3 years ago

Jesus O. · Reviewed about 3 years ago

ananth v. · Reviewed about 3 years ago

Alejandro B. · Reviewed about 3 years ago

Unmesh T. · Reviewed about 3 years ago

Ankit S. · Reviewed about 3 years ago

there were two syntax issues in the instructions 1) Set the default key for a bucket wrong syntax: gsutil kms encryption -k \ projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings\ /$KEYRIN correct syntax: gsutil kms encryption -k projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings/$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_1_NAME gs://$DEVSHELL_PROJECT_ID-kms 2) Bonus: Encrypt data with the REST API Step 8 command wrong syntax: curl -v \ "https://cloudkms.googleapis.com/v1/projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings/$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_1_NAME:decrypt" \ -d "{\"ciphertext\":\"$(cat data1.encrypted)\"}" \ -H "Authorization:Be Correct syntax: curl -v \ "https://cloudkms.googleapis.com/v1/projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings/$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_1_NAME:decrypt" \ -d "{\"ciphertext\":\"$(cat data1.encrypted)\"}" \ -H "Authorization:Bearer $(gcloud auth application-default \ print-access-token)" \ -H "Content-Type: application/json" \ | jq .plaintext -r > data1.decrypted

Ananth K. · Reviewed about 3 years ago

Nurhidayah B. · Reviewed about 3 years ago

Matheus L. · Reviewed about 3 years ago

Alex J. · Reviewed about 3 years ago

Charles E. · Reviewed about 3 years ago

Mariusz K. · Reviewed over 3 years ago

Vikas D. · Reviewed over 3 years ago

Swapnil K. · Reviewed over 3 years ago

Shishir J. · Reviewed over 3 years ago

Ronald C. · Reviewed over 3 years ago

Omar H. · Reviewed over 3 years ago

Valeria L. · Reviewed over 3 years ago

Yong Leong C. · Reviewed over 3 years ago

Muthukumar M. · Reviewed over 3 years ago

Elrayan M. · Reviewed over 3 years ago

Jih S. · Reviewed over 3 years ago

Martin N. · Reviewed over 3 years ago