Encryption at rest in Elastic Cloud: Bring your own key with Google Cloud

This post details the integration of Elastic Cloud with Google Cloud KMS for BYOK encryption at rest. It outlines the necessary prerequisites, including IAM permissions for key creation and management in Google Cloud, and an Enterprise license for Elastic Cloud. The post provides a step-by-step guide on creating a Google Cloud KMS key, configuring IAM roles for Elastic service principals and Google Cloud storage service agents, and then applying the Google Cloud Key resource name to an Elastic Cloud deployment. It also covers verification steps and discusses key rotation and revocation procedures.