Google-managed encryption keys (KMS) and Customer-managed encryption keys (CMEK)

Google-managed encryption keys (KMS):