An enterprise software company is migrating an internal billing platform to Google Cloud. The workload operates strictly within a single GCP region and requires a managed relational database with full PostgreSQL compatibility, automatic multi-zone high availability, and data encryption at rest managed through Cloud KMS. Which database architecture should you recommend to meet these requirements with minimal operational cost and complexity?
- Deploy Cloud SQL for PostgreSQL configured with high availability across multiple zones and Customer-Managed Encryption Keys (CMEK).Cevap
- BDeploy a multi-region Cloud Spanner instance configured with Customer-Managed Encryption Keys (CMEK).
- CDeploy Cloud SQL for PostgreSQL configured with high availability across multiple zones and Customer-Supplied Encryption Keys (CSEK).
- DDeploy Compute Engine virtual machines running self-managed PostgreSQL with primitive IAM Owner roles granted for service administration.
Cevap
The optimal architecture is to deploy Cloud SQL for PostgreSQL configured with high availability across zones and Customer-Managed Encryption Keys (CMEK) via Cloud KMS.
Cloud SQL for PostgreSQL provides a fully managed relational database engine tailored for single-region workloads. Enabling high availability provisions a standby instance in a secondary zone within the same region, and integrating Cloud KMS satisfies Customer-Managed Encryption Key (CMEK) compliance with minimal cost and management effort.
Adım Adım Çözüm
Anahtar Kavram
Selecting appropriate managed GCP database services based on regional scale and encryption requirements.
Tahmini Süre:1m 30s