An enterprise software company is migrating an internal billing platform to Google Cloud. The workload operates strictly within a single GCP region and requires a managed relational database with full PostgreSQL compatibility, automatic multi-zone high availability, and data encryption at rest managed through Cloud KMS. Which database architecture should you recommend to meet these requirements with minimal operational cost and complexity?
- Deploy Cloud SQL for PostgreSQL configured with high availability across multiple zones and Customer-Managed Encryption Keys (CMEK).Answer
- BDeploy a multi-region Cloud Spanner instance configured with Customer-Managed Encryption Keys (CMEK).
- CDeploy Cloud SQL for PostgreSQL configured with high availability across multiple zones and Customer-Supplied Encryption Keys (CSEK).
- DDeploy Compute Engine virtual machines running self-managed PostgreSQL with primitive IAM Owner roles granted for service administration.
Answer
The optimal architecture is to deploy Cloud SQL for PostgreSQL configured with high availability across zones and Customer-Managed Encryption Keys (CMEK) via Cloud KMS.
Cloud SQL for PostgreSQL provides a fully managed relational database engine tailored for single-region workloads. Enabling high availability provisions a standby instance in a secondary zone within the same region, and integrating Cloud KMS satisfies Customer-Managed Encryption Key (CMEK) compliance with minimal cost and management effort.
Step-by-Step Solution
Key Concept
Selecting appropriate managed GCP database services based on regional scale and encryption requirements.
Estimated Time:1m 30s