GCP-Compute-CSEK-Encryption-Enabled

Owned by naveen
Dec 08, 2021
1 min read

Severity : Medium

Description : Google encrypts all disks at rest by default. By using CSEK only the users with the key can access the disk. Anyone else, including Google, cannot access the disk data.

Remediation Steps : CSEK can only be configured when creating a disk. Delete the disk and redeploy with CSEK.

Blue Hexagon Proprietary