CMEK compliance in API Gateway

The API Gateway service doesn't persist customer data to disk, making the service automatically CMEK-compliant, with no configuration required.

What's next

Learn more about Customer-managed encryption keys
Learn more About API gateway
Learn more about Create an API

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-23 UTC.