Ensure that Google Dataflow jobs are encrypted with desired encryption level.
Google encrypts all jobs in Dataflow by default. Protecting source and sinks data for Dataflow batch pipeline with CMEK gives user more granular access to encryption and decryption process.
Use desired encryption level to encrypt Dataflow jobs.