Cloud SQL backup vaults support CMEK for immutable storage
securitygovernanceawsgcpgaengineer
feature
Cloud SQL instances encrypted with customer-managed encryption keys (CMEK) now have backup vault support, enabling immutable and indelible storage with enforced retention. This GA feature enhances data protection and compliance for sensitive workloads. It applies to users managing Cloud SQL instances with CMEK.
Features (1) ›
- Backup and DR
Backup vault support for Cloud SQL instances encrypted with customer-managed encryption keys (CMEK) is generally available (GA), providing immutable and indelible storage with enforced retention. For more information, see Back up Cloud SQL instances to a backup vault .
Read the original announcement →
https://docs.cloud.google.com/release-notes#June_18_2026