1
votes

BigQuery claims encryption at-rest support since Google encrypts data in its data centers[1] but apparently this encryption is done using Google's own keys.

Does BigQuery support customer-provided keys for at-rest data encryption?

[1] https://cloudplatform.googleblog.com/2014/08/googles-cloud-is-secure-but-you-dont.html

1
You may wish to check out the experimental encrypted BigQuery client. - Tim Swast

1 Answers

1
votes

Yes, BigQuery provides support for customer supplied encryption keys using the Google Cloud Console[1] and there is also experimental support for encryption keys using encrypted BigQuery client[2]. There is a broader range of capabilities that support customer supplied encryption keys in Google Cloud Storage and Google Compute Engine[3]

[1] https://www.youtube.com/watch?v=-dlv9wJheF8&

[2] https://github.com/google/encrypted-bigquery-client

[3] https://cloud.google.com/security/encryption-at-rest/