Policy Packs

guardrails-samples

Enforcing encryption at rest for GCP Storage Buckets is essential to protect sensitive data from unauthorized access and potential breaches by ensuring that all data is automatically encrypted before being stored.

Enforce Encryption at Rest Is Enabled for GCP Storage Buckets

main

gcp_storage_bucket_encryption_at_rest

Define the minimum level of encryption required for GCP Storage bucket.

bucketEncryptionAtRest

GCP > Storage > Bucket > Encryption at Rest

gcp_storage_bucket_encryption_at_rest_customer_managed_key

This template is used to generate the Google Cloud KMS symmetric key to use for bucket encryption at rest.

bucketEncryptionAtRestCustomerManagedKey

GCP > Storage > Bucket > Encryption at Rest > Customer Managed Key

turbot_policy_setting.gcp_storage_bucket_encryption_at_rest

turbot_policy_setting.gcp_storage_bucket_encryption_at_rest_customer_managed_key

Policy	Setting	Note
GCP > Storage > Bucket > Encryption at Rest	Check: Customer managed key
GCP > Storage > Bucket > Encryption at Rest > Customer Managed Key	projects/acmeproject/locations/global/keyRings/acmekeyring/cryptoKeys/acmekey/cryptoKeyVersions/1

Policy Settings