Professional Cloud DeveloperDemo

By Google · Question Mode

QuestionQ11

Integrating applications with Google Cloud services

Your application stores customer content in a Cloud Storage bucket, and every object is encrypted with that customer's encryption key. Each Cloud Storage object key is entered into your application by the customer. You find that the application receives an HTTP 4xx error while reading an object from Cloud Storage. What could cause this error?

  • A You attempted the read operation on the object with the customer's base64-encoded key.
  • B You attempted the read operation without the base64-encoded SHA256 hash of the encryption key.
  • C You entered the same encryption algorithm specified by the customer when attempting the read operation.
  • D You attempted the read operation on the object with the base64-encoded SHA256 hash of the customer's key.
Explanation

Cloud Storage customer-supplied encryption-key requests made through the REST APIs must include the AES256 algorithm, the Base64-encoded AES-256 key, and the Base64-encoded SHA-256 hash of that key. A read request that omits the required SHA-256 hash is invalid and can return an HTTP 400 error.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!