Concepts

• Object hierarchy

  Learn about different resource types in Cloud KMS including KeyRings, CryptoKeys, and CryptoKeyVersions.

• Key states

  Learn about the different states that can apply to keys stored in Cloud KMS.

• Key rotation

  Learn how key rotation works in Cloud KMS.

• Separation of duties

  Learn how to implement best practice separation of duties for Cloud KMS.

• Secret management

  Learn about managing secrets with Cloud KMS.

• Additional authenticated data

  Learn about additional authenticated data and how to use it when encrypting/decrypting.

• Envelope encryption

  Learn about multi-level encryption using Cloud KMS.