Status: IN
Server-side encryption is enabled by default on all Cloud Storage objects; CMEK and CSEK are supplemental options.
Source: entries/2026/03/10/gcs-overview.md
JSON