Professional Data Engineer

By Google · Question Mode

QuestionQ13

Storing the data

You administer a BigQuery dataset that uses a customer-managed encryption key (CMEK). You must share the dataset with a partner organization that lacks access to your CMEK. What should you do?

Explanation

Copy the required tables to a dataset that is not protected by the original CMEK, then publish that dataset through an Analytics Hub listing. Analytics Hub supports cross-organization sharing through listings and gives subscribers a read-only linked dataset. CMEK access is managed through Cloud KMS permissions for BigQuery service accounts; keys are not distributed to partner organizations or embedded in authorized views.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!