Policy: GCP > Storage > Bucket > Encryption at Rest > Customer Managed Key

This template is used to generate the Google Cloud KMS symmetric key to use for bucket encryption at rest.

Resource Types

This policy targets the following resource types:

This policy is used with the following primary policy:

This policy setting is used by the following policy packs:

Schema Type	`string`
Examples [YAML]	projects/cse-legolas/locations/global/keyRings/test/cryptoKeys/disk/cryptoKeyVersions/1

Category URI

tmod:@turbot/turbot#/control/categories/resourceEncryptionAtRest

Policy Type URI

tmod:@turbot/gcp-storage#/policy/types/bucketEncryptionAtRestCustomerManagedKey

GraphQL

query policyType(id: "tmod:@turbot/gcp-storage#/policy/types/bucketEncryptionAtRestCustomerManagedKey") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-storage#/policy/types/bucketEncryptionAtRestCustomerManagedKey'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-storage#/policy/types/bucketEncryptionAtRestCustomerManagedKey'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-storage#/policy/types/bucketEncryptionAtRestCustomerManagedKey"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-storage#/policy/types/bucketEncryptionAtRestCustomerManagedKey"