Concepts

• Object hierarchy

  Learn about different resource types in Cloud KMS including key rings, keys, and key versions.

• Key states

  Learn about the different states that can apply to keys stored in Cloud KMS.

• Key rotation

  Learn how key rotation works in Cloud KMS.

• Separation of duties

  Learn how to implement best practice separation of duties for Cloud KMS.

• Secret management

  Learn about managing secrets with Cloud KMS.

• Additional authenticated data

  Learn about additional authenticated data and how to use it when encrypting/decrypting.

• Envelope encryption

  Learn about multi-level encryption using Cloud KMS.

• Resource consistency

  Learn about the impact of consistency when Cloud KMS resources are created or modified.

• Locations

  Learn about the locations available for storing your Cloud KMS resources.