This lab walks you through Cloud KMS.
You will encrypt and decrypt a file.
Duration: 45 minutes
Cloud KMS is designed as a cryptographic system.
You can't get the keys out which means keys are locked inside the system and you need not worry about them leaking.
The only thing you can do with these keys is encryption, decryption, and any other cryptographic operation.
These keys are useful for protecting data, or even for encrypting secrets,
For e.g. if you want to keep a database password as a secret so that you should be able to use or send elsewhere, you can store an encrypted version, then use Cloud KMS to decrypt it.
Creating a KeyRing and Key.
Encrypting the file.
Decrypting the file.