Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Cloud Storage selalu mengenkripsi data Anda di sisi server, sebelum
ditulis ke disk, tanpa biaya tambahan. Halaman ini membahas enkripsi standar
yang dilakukan Cloud Storage. Untuk opsi enkripsi lainnya,
lihat Opsi Enkripsi Data.
Cloud Storage mengelola kunci enkripsi sisi server untuk Anda menggunakan sistem pengelolaan kunci yang telah melalui proses hardening, yang kami gunakan untuk data terenkripsi milik kami, termasuk pengauditan dan kontrol akses kunci yang ketat. Cloud Storage
mengenkripsi data pengguna dalam penyimpanan menggunakan AES-256, pada sebagian besar kasus menggunakan
Galois/Counter Mode (GCM). Tidak diperlukan penyiapan atau konfigurasi, tidak perlu mengubah cara Anda mengakses layanan, dan tidak ada dampak performa yang terlihat. Data didekripsi secara otomatis saat dibaca oleh
pengguna yang diberi otorisasi.
Untuk mengetahui informasi selengkapnya tentang cara Google Cloud dan Cloud Storage mengelola
kunci enkripsi, lihat Enkripsi default dalam penyimpanan. Google Cloud
Untuk melindungi data saat berpindah melalui internet selama operasi baca dan tulis, gunakan Transport Layer Security, yang umumnya dikenal sebagai TLS atau HTTPS.
Untuk mengetahui informasi selengkapnya tentang cara Google-owned and Google-managed encryption keys dirotasi, dikelola, dan disimpan, lihat Pengelolaan kunci.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-09-05 UTC."],[],[],null,["# Standard Cloud Storage encryption\n\nCloud Storage always encrypts your data on the server side, before it is\nwritten to disk, at no additional charge. This page discusses the standard\nencryption that Cloud Storage performs. For other encryption options,\nsee [Data Encryption Options](/storage/docs/encryption).\n\nCloud Storage manages server-side encryption keys on your behalf using\nthe same hardened key management systems that we use for our own encrypted data,\nincluding strict key access controls and auditing. Cloud Storage\nencrypts user data at rest using [AES-256](https://en.wikipedia.org/wiki/Advanced_Encryption_Standard), in most cases using\n[Galois/Counter Mode (GCM)](http://wikipedia.org/wiki/Galois/Counter_Mode). There is no setup or\nconfiguration required, no need to modify the way you access the service, and\nno visible performance impact. Data is automatically decrypted when read by an\nauthorized user.\n\nFor more information about how Google Cloud and Cloud Storage manage\nencryption keys, see [Default encryption at rest](/docs/security/encryption/default-encryption).\n\nTo protect your data as it travels over the Internet during read and write\noperations, use Transport Layer Security, commonly known as TLS or HTTPS.\n\nWhat's next\n-----------\n\n- Learn more about [Choosing an encryption option](/storage/docs/encryption).\n\n- For more information about how Google-owned and Google-managed encryption keys are rotated, managed,\n and stored, see [Key management](/docs/security/encryption/default-encryption#key_management).\n\n- See [Encryption at the storage system layer](/docs/security/encryption/default-encryption#hardware) to learn about the\n encryption modes that are used in Google Cloud."]]
