[[["わかりやすい","easyToUnderstand","thumb-up"],["問題の解決に役立った","solvedMyProblem","thumb-up"],["その他","otherUp","thumb-up"]],[["わかりにくい","hardToUnderstand","thumb-down"],["情報またはサンプルコードが不正確","incorrectInformationOrSampleCode","thumb-down"],["必要な情報 / サンプルがない","missingTheInformationSamplesINeed","thumb-down"],["翻訳に関する問題","translationIssue","thumb-down"],["その他","otherDown","thumb-down"]],["最終更新日 2025-09-04 UTC。"],[[["\u003cp\u003eCustomer-Managed Encryption Keys (CMEK) can be used to encrypt user data in Cloud Composer environments, but can only be configured when creating a new environment, not for existing ones.\u003c/p\u003e\n"],["\u003cp\u003eCMEK keys must be created in the same region as the Cloud Composer environment and require specific service agents to have the Cloud KMS CryptoKey Encrypter/Decrypter role on the key for proper functionality.\u003c/p\u003e\n"],["\u003cp\u003eIf a CMEK key used by an environment is disabled or deleted, the environment becomes unusable and unrecoverable.\u003c/p\u003e\n"],["\u003cp\u003eCloud Composer logs can be redirected to a CMEK-encrypted Cloud Storage bucket by creating a log sink and setting up the necessary permissions, which allows for the exclusion of these logs from monitoring.\u003c/p\u003e\n"],["\u003cp\u003eSome user information such as the environment name, certain configurations and labels are protected using Google-owned and Google-managed encryption keys, not CMEK keys, and Cloud Monitoring does not support CMEK encryption.\u003c/p\u003e\n"]]],[],null,[]]