KMS Key

KMS Key Presets

Ready-to-deploy configuration presets for KMS Key. Each preset is a complete manifest you can copy, customize, and deploy.

3 presets
01

Preset: Symmetric Encryption Key (CMEK)

Use this preset when you need a standard customer-managed encryption key (CMEK) for encrypting data in GCP services like BigQuery, Spanner, CloudSQL, GCS, GKE, PubSub, or AlloyDB.

02

Preset: HSM-Protected Symmetric Encryption Key

Use this preset when you need a customer-managed encryption key that is protected by hardware security modules (HSM). This is required for compliance scenarios that mandate FIPS 140-2 Level 3...

03

Preset: Asymmetric Signing Key

Use this preset when you need a key for digital signatures -- signing build artifacts, container images, JWTs, or any data that requires integrity verification.