VM disks should be encrypted with Customer Supplied Encryption Keys
Using unmanaged keys makes rotation and general management difficult.
Impact
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Use managed keys
1
2
3
4
5
6
7
8
9
10
11
12
|
resource "google_compute_instance" "good_example" {
name = "test"
machine_type = "e2-medium"
zone = "us-central1-a"
boot_disk {
initialize_params {
image = "debian-cloud/debian-9"
}
kms_key_self_link = "something"
}
}
|