github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/google/compute/AVD-GCP-0034/Terraform.md (about)

     1  
     2  Use managed keys to encrypt disks.
     3  
     4  ```hcl
     5   resource "google_compute_disk" "good_example" {
     6     name  = "test-disk"
     7     type  = "pd-ssd"
     8     zone  = "us-central1-a"
     9     image = "debian-9-stretch-v20200805"
    10     labels = {
    11       environment = "dev"
    12     }
    13     physical_block_size_bytes = 4096
    14     disk_encryption_key {
    15       kms_key_self_link = "something"
    16     }
    17   }
    18   
    19  ```
    20  
    21  #### Remediation Links
    22   - https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_disk#kms_key_self_link
    23