Skip to content

Latest commit

 

History

History
25 lines (21 loc) · 1.77 KB

bucket-encryption.md

File metadata and controls

25 lines (21 loc) · 1.77 KB
Raw

CloudSploit

GOOGLE / Storage / Bucket Encryption

Quick Info
Plugin Title Bucket Encryption
Cloud GOOGLE
Category Storage
Description Ensure that Cloud Storage buckets have encryption enabled using desired protection level.
More Info By default, all storage buckets are encrypted using Google-managed keys. To have better control over how your storage bucktes are encrypted, you can use Customer-Managed Keys (CMKs).
GOOGLE Link https://cloud.google.com/storage/docs/encryption/customer-managed-keys
Recommended Action Ensure that all storage buckets have desired encryption level.

Detailed Remediation Steps

  1. Log into the Google Cloud Platform Console.
  2. Scroll down the left navigation panel and choose "Cloud Storage" to select the "Buckets" option.
  3. On the "Buckets" page, select the bucket which needs to be configured with the desire encryption level .
  4. Select the "CONFIGURATION" tab to access the configuration defined for selected bucket.
  5. Select on Encryption type and click on edit option.
  6. A popup panel will appear on screen.
  7. Select the desire encryption level want to set on selected bucket and then click "Save"
  8. Repeat steps number 4-6 to configure encryption of desire level to all other buckets in the project.