用客户管理的加密上传到存储桶失败

时间:2019-04-11 07:34:28

标签: google-cloud-platform cloud google-cloud-kms

基于https://cloud.google.com/storage/docs/encryption/using-customer-managed-keys

复制步骤:

  1. 在特定位置在Cloud KMS中创建钥匙圈和钥匙 (例如us-central-1)。
  2. 向创建的密钥的存储服务帐户授予Cloud KMS CryptoKey加密器/解密器的许可。
  3. 在位置(us-central-1)中创建一个新的区域存储桶,并设置创建的KMS密钥进行加密。
  4. 尝试将文件上传到存储桶。

结果:

{
 "error": {
  "errors": [
   {
    "domain": "global",
    "reason": "forbidden",
    "message": "We're sorry, but the Cloud KMS encryption feature is not available in your location; see https://cloud.google.com/storage/docs/encryption/customer-managed-keys#restrictions for more details."
   }
  ],
  "code": 403,
  "message": "We're sorry, but the Cloud KMS encryption feature is not available in your location; see https://cloud.google.com/storage/docs/encryption/customer-managed-keys#restrictions for more details."
 }
}

我很确定这是一个配置错误的问题,但无法弄清楚我的错误。该请求不是来自受限制的国家-https://cloud.google.com/compute/docs/disks/customer-supplied-encryption#general_restrictions

0 个答案:

没有答案