Key Management Errors
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-320: CWE CATEGORY: Key Management Errors |
| OWASP | A03:2017 - Sensitive Data Exposure |
| Confidence Level | Low |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
The Bigtable instance is not configured to use a customer-managed encryption key (CMEK) for data encryption. This means your data relies solely on Google-managed keys, reducing your control over encryption and key management.
Impact#
If not encrypted with a customer-managed key, sensitive data stored in Bigtable could be less protected against unauthorized access or regulatory non-compliance. An attacker or unauthorized third party with sufficient access could potentially obtain unencrypted data, and you lose the ability to rotate or revoke encryption keys if needed.