Professional Cloud ArchitectDesign for security and complianceEasy
A multinational e-commerce company is expanding its operations into new regions. They need to ensure that customer data stored in Google Cloud meets the data residency requirements of each specific country, meaning data must physically reside within the borders of that country. The company uses Cloud Storage for storing user-uploaded content and customer profiles. How can the company best achieve this data residency requirement for Cloud Storage?
- ACreate separate Cloud Storage buckets in each required geographic region.
- BUse a single multi-region bucket and rely on Google's global network.
- CEncrypt all data with CMEK and specify the key's region during creation.
- DConfigure VPC Service Controls to restrict data egress to specific regions.
Show answer & explanationAnswer & explanation
Correct answer: A. Create separate Cloud Storage buckets in each required geographic region.
To meet strict data residency requirements, data must be stored within the specified geographic boundaries. Creating separate Cloud Storage buckets in each required region ensures that the data physically resides in that region.
Why the other options are wrong
- B. Multi-region buckets distribute data across multiple regions for availability, but don't guarantee data stays within a single country's borders.
- C. CMEK encrypts data and keys can be regional, but the key's region does not dictate the data's storage region. The bucket's region does.
- D. VPC Service Controls protect against data exfiltration but do not dictate the physical storage location of data at rest.
Cloud Storage Data Residency
Ensuring that data stored in Cloud Storage physically resides within a specific geographic region or country to meet regulatory and compliance requirements.
- Achieved by selecting appropriate bucket locations (region or multi-region).
- Regional buckets guarantee data stays within a single region.
- Multi-region buckets distribute data across a broader geography for resilience.
Memory trick: Residency: Regions Rule, Multi-regions Roam.