Compute disks should use customer-managed encryption keys

google_compute_disk

Description

Compute disks should use customer-managed encryption keys (CMEK) from Cloud Key Management Service (Cloud KMS) to provide control over key access, rotation, and lifecycle.

Remediation

Create a replacement disk protected with a Cloud KMS key by following Protect resources with Cloud KMS keys.