Google announced that Google Cloud Storage now encrypts all data before it’s written to disk. It’s better and no extra cost In fact, you don’t even have to do anything extra or change any settings. Data is simply decrypted when read by an authorized user.
“Each Cloud Storage object’s data and metadata is encrypted with a unique key under the 128-bit Advanced Encryption Standard (AES-128), and the per-object key itself is encrypted with a unique key associated with the object owner,” Barth adds.