For more info
https://cloud.google.com/security-key...
TimeLine :
00:00 : introduction
01:05 : Create Key-Ring
01:49 : Create Key
03:07 : Use key to Encrypt your cloud storage bucket
04:42 : Encrypt a text file using Gcloud encrypt command
06:30 : Decrypt a text file using Gcloud decrypt command
How to encrypt and decrypt using gcloud command
gcloud kms encrypt \
--key my-demo-key \
--keyring my-demo-key-ring \
--location us-central1 \
--plaintext-file a.txt \
--ciphertext-file b.txt.enc
gcloud kms decrypt \
--key my-demo-key \
--keyring my-demo-key-ring \
--location us-central1 \
--ciphertext-file b.txt.enc \
--plaintext-file c.txt