zecfoundation
/
cloud-foundation-fabric
mirror of https://github.com/ZcashFoundation/cloud-foundation-fabric.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cloud-foundation-fabric/data-solutions/README.md

12 lines
891 B
Markdown
Raw Normal View History

Add e2e example to use Cloud KMS with GCE and GCS. KMS deployed in a separate project to reflect common architecture pattern where companies have a centralized KMS and service projects using crypto keys.
2020-06-08 08:36:35 -07:00
# GCP Data Services examples
Update README.md
2020-06-10 04:29:44 -07:00
The examples in this folder implement **typical data service topologies** and **end-to-end scenarios**, that allow testing specific features like Cloud KMS to encrypt your data, or VPC-SC to mitigate data exfiltration.
Add e2e example to use Cloud KMS with GCE and GCS. KMS deployed in a separate project to reflect common architecture pattern where companies have a centralized KMS and service projects using crypto keys.
2020-06-08 08:36:35 -07:00
They are meant to be used as minimal but complete starting points to create actual infrastructure, and as playgrounds to experiment with specific Google Cloud features.
## Examples
### Cloud KMS with Cloud Storage and Compute Engine
Update README.md
2020-06-10 04:29:44 -07:00
<a href="./cloud-kms/" title="Cloud KMS with Cloud Storage and Compute Engine"><img src="./cloud-kms/diagram.png" align="left" width="280px"></a> This [example](./cloud-kms/) implements a project that hosts a centralized Cloud KMS instance, and a second project where KMS keys will be used to encrypt resources at rest (CMEK). The roles and permissions needed to use the services are part of the example.