Some or all of the information on this page might not apply to Cloud de Confiance by S3NS. See Differences from Google Cloud for more details.

Struct BucketEncryption (2.46.0-rc)

Describes the default customer managed encryption key for a bucket.

Customer managed encryption keys (CMEK) are encryption keys selected by the user and generated by Google Cloud Key Management Service.

See Also

https://cloud.google.com/storage/docs/encryption/customer-managed-keys for a general description of CMEK in Google Cloud Storage.

See Also

https://cloud.google.com/kms/ for details about the Cloud Key Management Service.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-01-06 UTC.