Cloud SQL backup vaults support CMEK for immutable storage
securitygovernanceawsgcpgaengineergcp-cloud-sql
feature
Cloud SQL instances encrypted with customer-managed encryption keys (CMEK) now have backup vault support, enabling immutable and indelible storage with enforced retention. This GA feature enhances data protection and compliance for sensitive workloads. It applies to users managing Cloud SQL instances with CMEK.
Features (1) ›
- Backup and DR
Backup vault support for Cloud SQL instances encrypted with customer-managed encryption keys (CMEK) is generally available (GA), providing immutable and indelible storage with enforced retention. For more information, see Back up Cloud SQL instances to a backup vault .
Read the original announcement →
https://docs.cloud.google.com/release-notes#June_18_2026
Related releases
- Config Connector 1.154.1 Adds New Alpha Resources and Field Support Google Cloud release notes ·
- Cloud SQL for PostgreSQL: Private Service Connect changes August 2026 Google Cloud release notes ·
- Cloud SQL for SQL Server: Private Service Connect connection behavior changes Google Cloud release notes ·
- Cloud SQL for MySQL: Private Service Connect and QueryData Updates Google Cloud release notes ·
- Cloud SQL for PostgreSQL: Faster CMEK Re-encryption Google Cloud release notes ·
- Cloud SQL for SQL Server: Faster CMEK re-encryption with zero downtime Google Cloud release notes ·