---
title: Compute disks should use customer-managed encryption keys
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Compute disks should use
  customer-managed encryption keys
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Compute disks should use customer-managed encryption keys
 
## Description{% #description %}

Compute disks should use customer-managed encryption keys (CMEK) from Cloud Key Management Service (Cloud KMS) to provide control over key access, rotation, and lifecycle.

## Remediation{% #remediation %}

Create a replacement disk protected with a Cloud KMS key by following [Protect resources with Cloud KMS keys](https://docs.cloud.google.com/compute/docs/disks/customer-managed-encryption).