Please enable JavaScript.
Coggle requires JavaScript to display documents.
GCP Security - Coggle Diagram
GCP Security
Data Loss Prevention API
find sensitive data
cards numbers
email's
GCS
Firestore
BigQuery
find, delete, mask, tokenize, etc
images supported
Data secured at rest
DEK = Data Encryption Key
KEK = Key Encryption Key
encrypted key kept locally to data as KEK used
KEK's stored in Cloud KMS
(key is symetric)
Customer Managed Keys
Create in KMS
Simply set of params
created inside GCP
Customer Supplied
Encryption Keys (CSEK)
created in external environment
GCE and GCS only