79382323

Date: 2025-01-23 19:24:37
Score: 2
Natty:
Report link

BigQuery uses envelope encryption. This means the data is encrypted with a Google-managed data encryption key, which is then encrypted with your key, referred to as a key encryption key. So upon key rotation, the only thing that is re-encrypted is the original data encryption key. The data itself is not re-encrypted. See https://cloud.google.com/bigquery/docs/customer-managed-encryption.

Reasons:
  • No code block (0.5):
  • Single line (0.5):
  • Low reputation (1):
Posted by: Muheng