{"id":"gcs-server-side-encryption-always-on","text":"Server-side encryption is enabled by default on all Cloud Storage objects; CMEK and CSEK are supplemental options.","truth_value":"IN","source":"entries/2026/03/10/gcs-overview.md","source_url":"","source_hash":"dd2c4c31b60dabdb","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"gcs-server-side-encryption-always-on","truth_value":"IN","reason":"premise"}]}}