Cloud KMS allows you to keep encryption keys in one central cloud service,
for direct use by other cloud resources and applications. With Cloud KMS
you are the ultimate custodian of your data, you can manage encryption in
the cloud the same way you do on-premises, and you have a provable and
monitorable root of trust over your data.