4 ms·

This may be useful: https://cloud.google.com/security/encryption-at-rest/default-encryption/ https://cloud.google.com/security/encryption-at-rest/default...

• thinkloop 8y ago
  Important piece of the puzzle (as of April 2017): Google Cloud Platform encrypts customer content stored at rest, without any action from the customer, using one or more encryption mechanisms, with the following exceptions. - Serial console logs from virtual machines in Google Compute Engine; this is currently being remediated - Core dumps written to local drives, when a process fails unexpectedly; this is currently being remediated - Debugging logs written to local disk; this is currently being remediated - Temporary files used by storage systems; this is currently being remediated - Some logs that may include customer content as well as customer metadata; this is planned for remediation This data is still protected extensively by the rest of Google’s security infrastructure, and in almost all cases still protected by storage-level encryption.
  • thinkloop 8y ago
    Google of course has the decryption keys, another important piece is their policy on looking at data themselves.
    • dkoston 8y ago
      Not true if you bring your own disk encryption keys. AWS also allows you to bring your own keys.