Cloud KMS Documentation Documentation Tutorials Encrypting data at rest Encrypt data in a Google Cloud Storage bucket at the application layer using Cloud KMS. Encrypting a java application Build a bookshelf java app with data encrypted at the application layer in Google Cloud Storage. Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 3.0 License, and code samples are licensed under the Apache 2.0 License. For details, see our Site Policies. Java is a registered trademark of Oracle and/or its affiliates.