Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
Which Google Cloud service allows you to manage cryptographic keys (AES-256, RSA, etc.) at scale and use them to protect your data-at-rest?
What is the difference between a 'Key Ring' and a 'CryptoKey' in Cloud KMS?
What is 'Automatic Key Rotation' in Cloud KMS?
What is 'Customer-Managed Encryption Keys' (CMEK) and how does it integrate with Cloud Storage?