Cloud KMS Documentation Documentation Tutorials Encrypting data at rest Encrypt data in a Google Cloud Storage bucket at the application layer using Cloud KMS. Encrypting a java application Build a bookshelf java app with data encrypted at the application layer in Google Cloud Storage. Monitor your resources on the go Get the Google Cloud Console app to help you manage your projects. Not now Use the app Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 3.0 License, and code samples are licensed under the Apache 2.0 License. For details, see our Site Policies. Java is a registered trademark of Oracle and/or its affiliates.