ALERT: Due to maintenance activity, you might not see any screenshots. Your patience is highly appreciated. Thanks!!
This lab walks you through Cloud KMS.
You will encrypt and decrypt a file.
Region: us-central1
Duration: 45 minutes
Cloud KMS is designed as a cryptographic system.
You can't get the keys out which means keys are locked inside the system and you need not worry about them leaking.
The only thing you can do with these keys is encryption, decryption, and any other cryptographic operation.
These keys are useful for protecting data, or even for encrypting secrets.
For e.g. if you want to keep a database password a secret so that you should be able to use or send it elsewhere, you can store an encrypted version, then use Cloud KMS to decrypt it.
Creating a KeyRing and Key.
Encrypting the file.
Decrypting the file.