An enterprise organization is setting up a managed relational database infrastructure on Google Cloud for a regional internal application. The system requires full ACID compliance, automated backup capabilities with point-in-time recovery, and compliance with strict data governance mandates requiring customer key management control via Cloud KMS without requiring the operations team to handle raw encryption key material directly. Which database deployment and encryption configuration best fulfills these requirements while avoiding unnecessary cost and operational complexity?
- Provision a Cloud SQL for PostgreSQL instance configured with regional High Availability (HA) and encrypted with Customer-Managed Encryption Keys (CMEK) integrated with Cloud KMS.Cevap
- BProvision a multi-region Cloud Spanner instance configured with Customer-Managed Encryption Keys (CMEK) integrated with Cloud KMS.
- CProvision a Cloud SQL for PostgreSQL instance configured with regional High Availability (HA) and encrypted with Customer-Supplied Encryption Keys (CSEK).
- DProvision a standalone Compute Engine instance running PostgreSQL and rely on Storage Transfer Service to execute continuous database backups to a Cloud Storage bucket.
Cevap
Provision a Cloud SQL for PostgreSQL instance configured with regional High Availability (HA) and encrypted with Customer-Managed Encryption Keys (CMEK) integrated with Cloud KMS.
Provisioning a Cloud SQL instance with regional High Availability and Customer-Managed Encryption Keys (CMEK) via Cloud KMS delivers a fully managed ACID-compliant relational database with automated backups and point-in-time recovery. CMEK allows the customer to control key lifecycle policies without the operational burden of storing and supplying raw key material.
Adım Adım Çözüm
Anahtar Kavram
Provisioning Relational Databases and Key Governance
Tahmini Süre:1m 30s