Please enable JavaScript.
Coggle requires JavaScript to display documents.
GCP_KMS - Coggle Diagram
GCP_KMS
KMS (Cryptographic keys in GCP)
Recommended way to encrypt the values and keep them. Manage keys
integration with different services
Customer managed keys Use from KMS
Customer supplied keys Provide own key
Google Managed key - managed by google, no action items
key ring - we can attach keys to ring
can be regional or global
types:
Generated
Imported
Externally managed (not available for global, only for region level)
protection
software
hardware
Porpose
asymmetric sigh
asymmetric decrypt
symmetric key
data states
data in rest
data in motion(transit)
In/out cloud - week control, need to be careful
inside the cloud - we can controll here all
data in use: in RAM
ENCRYPTIONS
Symmetric - use one key of encrypt and decrypt
think how to secure encryption key, how to keep it securely
share encryption key
need to chose strong algorithm
Asymetric
encrypt with public and decrypt with private keys
we can share public key with anyone
contains of Public and Private key
we can find private key from public. But it may take some time; (2 years for RSA)