Which of these are examples of a value in a sparse vector? (Select 2 answers.)
To re-encrypt all of your CMEK-protected Cloud Storage data after a key has been exposed, and to ensure future writes are protected with a new key, creating a new Cloud KMS key and a new Cloud Storage bucket is the best approach. Here's why option C is the best choice:
Re-encryption of Data:
By creating a new Cloud Storage bucket and copying all objects from the old bucket to the new bucket while specifying the new Cloud KMS key, you ensure that all data is re-encrypted with the new key.
This process effectively re-encrypts the data, removing any dependency on the compromised key.
Ensuring CMEK Protection:
Creating a new bucket and setting the new CMEK as the default ensures that all future objects written to the bucket are automatically protected with the new key.
This reduces the risk of objects being written without CMEK protection.
Deletion of Compromised Key:
Once the data has been copied and re-encrypted, the old key can be safely deleted from Cloud KMS, eliminating the risk associated with the compromised key.
Steps to Implement:
Create a New Cloud KMS Key:
Create a new encryption key in Cloud KMS to replace the compromised key.
Create a New Cloud Storage Bucket:
Create a new Cloud Storage bucket and set the default CMEK to the new key.
Copy and Re-encrypt Data:
Use the gsutil tool to copy data from the old bucket to the new bucket while specifying the new CMEK key:
gsutil -o 'GSUtil:gs_json_api_version=2' cp -r gs://old-bucket/* gs://new-bucket/
Delete the Old Key:
After ensuring all data is copied and re-encrypted, delete the compromised key from Cloud KMS.
Cloud KMS Documentation
Cloud Storage Encryption
Re-encrypting Data in Cloud Storage
Mabel
5 months agoMing
5 months agoJunita
6 months agoArthur
6 months agoEmilio
6 months agoTiera
6 months agoLayla
7 months agoSantos
7 months agoKristin
7 months agoRory
7 months agoFrance
7 months agoStefan
7 months agoBritt
7 months agoDoyle
7 months agoMan
7 months agoKristin
7 months agoChaya
7 months agoLevi
7 months agoGlory
12 months agoLing
10 months agoGeoffrey
10 months agoLorrie
11 months agoJarod
1 year agoBuddy
11 months agoMozell
11 months agoRashida
12 months agoKenny
1 year agoAnnamae
11 months agoCaren
11 months agoLouisa
11 months agoDyan
11 months agoPaola
11 months agoOdette
11 months agoAmira
12 months agoNana
1 year agoRaymon
12 months agoStephaine
1 year agoScot
1 year agoAshleigh
12 months agoJoanne
1 year agoNathalie
1 year agoJettie
1 year agoKenneth
1 year agoMartin
1 year agoJesusa
1 year agoTitus
1 year ago