The data backing this resource is encrypted at rest with a key that is
managed by the customer.
The in-use version of the key and its status are populated for
CMEK-protected tables.
CMEK-protected backups are pinned to the key version that was in use at
the time the backup was taken. This key version is populated but its
status is not tracked and is reported as UNKNOWN.
GoogleDefaultEncryption
The data backing this resource is encrypted at rest with a key that is
fully managed by Google. No key version or status will be populated.
This is the default state.
Unspecified
Encryption type was not specified, though data at rest remains encrypted.
