Status: IN
CMEK keys are stored in Cloud KMS (Google stores them, customer manages them); CSEK keys are provided per-request and never stored by Google.
Source: entries/2026/03/10/gcs-encryption.md
JSON