Send feedback Cloud KMS Documentation Documentation Tutorials Encrypting data at rest Encrypt data in a Google Cloud Storage bucket at the application layer using Cloud KMS. Was this page helpful? Let us know how we did: Send feedback Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 3.0 License, and code samples are licensed under the Apache 2.0 License. For details, see our Site Policies. Java is a registered trademark of Oracle and/or its affiliates.