Using Customer-Managed Encryption Keys with Cloud Storage and Cloud KMS Reviews

Lab does not work. Will not accept global for keys.

Russell L. · Reviewed almost 6 years ago

hade trouble with using "global" keys on a US GCS. Had to create US keys instead.

Felix T. · Reviewed almost 6 years ago

Nicolas D. · Reviewed almost 6 years ago

Alex S. · Reviewed almost 6 years ago

Nicolas D. · Reviewed almost 6 years ago

Can't upload file into bucket.

Claudio P. · Reviewed almost 6 years ago

Dheeraj S. · Reviewed almost 6 years ago

Can't upload file into bucket

Claudio P. · Reviewed almost 6 years ago

Martin M. · Reviewed almost 6 years ago

Pedro O. · Reviewed almost 6 years ago

Anurag T. · Reviewed almost 6 years ago

global keyrings are not compatible with US buckets. Required lots of effort to have score completed. Needed to make second keyring

Emily C. · Reviewed almost 6 years ago

Need to change GCS location. Because when you use global key in region US GCS, gsutil returns: BadRequestException: 400 Cloud KMS region 'global' not available for use with GCS region 'US'.

Heryudi G. · Reviewed almost 6 years ago

Error with this Lab: student_00_5d474bc34f1c@cloudshell:~ (qwiklabs-gcp-00-59483ae27010)$ gsutil cp file2.txt gs://$DEVSHELL_PROJECT_ID-kms Copying file://file2.txt [Content-Type=text/plain]... BadRequestException: 400 Cloud KMS region 'global' not available for use with GCS region 'US'. a lot of issues .. after many retrials, i am no more able to create the bucket (the first command of the lab !!!) message sent to Support !!

Michel K. · Reviewed almost 6 years ago

BadRequestException: 400 Cloud KMS region 'global' not available for use with GCS region 'US'.

Jacek K. · Reviewed almost 6 years ago

The lab is broken for US users: BadRequestException: 400 Cloud KMS region 'global' not available for use with GCS region 'US'. I was able to finish by updating the commands to this: gsutil kms encryption -k \ projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings\ /$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_1_NAME \ gs://$DEVSHELL_PROJECT_ID-kms gcloud kms keys create $CRYPTOKEY_1_NAME --location us \ --keyring $KEYRING_NAME --purpose encryption gcloud kms keys create $CRYPTOKEY_2_NAME --location us \ --keyring $KEYRING_NAME --purpose encryption gsutil kms authorize -p $DEVSHELL_PROJECT_ID -k \ projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings\ /$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_1_NAME gsutil kms authorize -p $DEVSHELL_PROJECT_ID -k \ projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings\ /$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_2_NAME gsutil kms encryption -k \ projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings\ /$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_1_NAME \ gs://$DEVSHELL_PROJECT_ID-kms gsutil -o \ "GSUtil:encryption_key=projects/$DEVSHELL_PROJECT_ID/locations/us/keyRings\ /$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_2_NAME" \ cp file3.txt gs://$DEVSHELL_PROJECT_ID-kms

Rafael C. · Reviewed almost 6 years ago

Dheeraj S. · Reviewed almost 6 years ago

Pakorn N. · Reviewed almost 6 years ago

Cristian M. · Reviewed almost 6 years ago

Ivan J. · Reviewed almost 6 years ago

Le D. · Reviewed almost 6 years ago

Lab has a bug. "Cloud KMS region 'global' not available for use with GCP region 'US'

Nicolas V. · Reviewed almost 6 years ago

BadRequestException: 400 Cloud KMS region 'global' not available for use with GCS region 'US'.

Jacek K. · Reviewed almost 6 years ago

Anton H. · Reviewed almost 6 years ago

BadRequestException: 400 Cloud KMS region 'global' not available for use with GCS region 'US'.

Jacek K. · Reviewed almost 6 years ago