Last updated on March 27, 2023
Google Cloud KMS Cheat Sheet
- The Google Cloud Key Management Service (KMS) is a cloud-hosted key management service that enables you to manage encryption keys on the Google Cloud Platform.
Features
- Lets you manage your symmetric and asymmetric cryptographic keys the same way you manage them in an on-premises environment.
- You can decide to use the keys generated by Cloud KMS with other Google Cloud services. These keys are known as customer-managed encryption keys (CMEK).
- Can use external KMS to protect your data in Google Cloud and separate data from key.
- You can generate a new key version for your symmetric keys automatically at a fixed time interval when you set a rotation schedule for your keys.
- Encrypt Kubernetes secrets in GKE with keys you manage in Cloud KMS. Moreover, you can store API keys, passwords, certificates, and other sensitive information with the Secret Manager storage system.
Pricing
- Cloud KMS pricing is based on:
- the number of active key versions
- the protection level on the key versions
- usage rate for key operations.
Google Cloud KMS Cheat Sheet References:
https://cloud.google.com/security-key-management
https://cloud.google.com/security/key-management-deep-dive
Get 20% Off – Christmas Big Sale on All Practice Exams, Video Courses, and eBooks!
Learn AWS with our PlayCloud Hands-On Labs
Tutorials Dojo Exam Study Guide eBooks
FREE AWS Exam Readiness Digital Courses
FREE AWS, Azure, GCP Practice Test Samplers
Subscribe to our YouTube Channel
Follow Us On Linkedin
Written by: Jon Bonso
Jon Bonso is the co-founder of Tutorials Dojo, an EdTech startup and an AWS Digital Training Partner that provides high-quality educational materials in the cloud computing space. He graduated from Mapúa Institute of Technology in 2007 with a bachelor's degree in Information Technology. Jon holds 10 AWS Certifications and is also an active AWS Community Builder since 2020.
