LOW
Source
Trivy
ID
AVD-GCP-0033

VM disks should be encrypted with Customer Supplied Encryption Keys

Using unmanaged keys makes rotation and general management difficult.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Use managed keys

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
resource "google_compute_instance" "good_example" {
  name         = "test"
  machine_type = "e2-medium"
  zone         = "us-central1-a"

  boot_disk {
    initialize_params {
      image = "debian-cloud/debian-9"
    }
    kms_key_self_link = "something"
  }
}