Description

Google Cloud Storage service allows you to store and retrieve data in a bucket. It was found that the {GcpStorageBucket} bucket is encrypted by default with Google-Managed key instead of using Customer-Managed key (CMK), which provides an extra strong layer of protection and control over your encrypted data.

• 

  Recommended Mitigation

  It is recommended that you encrypt your bucket data using a Customer Management Key (CMK). Form more information: https://cloud.google.com/storage/docs/encryption