Meta tags:

Headings (most frequently used words):

key, cmek, cluster, and, create, gcloud, to, that, uses, the, for, use, customer, managed, encryption, keys, stay, organized, with, collections, save, categorize, content, based, on, your, preferences, before, you, begin, workflow, ring, grant, memorystore, redis, service, account, access, view, information, enabled, manage, versions, what, next, products, pricing, support, resources, engage,

Text of the page (most frequently used words):
the (103), and (48), key (45), #cluster (43), for (33), you (30), redis (24), cmek (23), about (19), memorystore (18), that (17), #create (17), use (15), service (15), access (15), persistence (14), cloud (12), information (12), gcloud (12), google (11), region (11), account (11), manage (10), clusters (10), ring (10), keys (10), with (9), can (9), using (9), iam (9), encryption (9), see (8), name (8), project (8), your (8), instance (8), code (7), thumb (7), more (7), this (7), enable (7), region_id (7), overview (7), grant (7), maintenance (7), resources (6), down (6), want (6), view (6), enabled (6), key_name (6), key_ring (6), customer (6), managed (6), vpc (6), samples (5), versions (5), where (5), contains (5), project_name (5), following (5), set (5), uses (5), control (5), data (5), management (5), networking (5), search (5), cross (5), português (4), español (4), need (4), backups (4), cluster_id (4), make (4), command (4), rdb (4), based (4), aof (4), network (4), kms (4), location (4), guides (4), tools (4), application (4), commands (4), supported (4), vector (4), scale (4), authentication (4), multiple (4), instances (4), content (3), registered (3), destroy (3), restore (3), disable (3), when (3), located (3), replacements (3), reference (3), cli (3), note (3), mode (3), number (3), have (3), also (3), project_number (3), policy (3), must (3), same (3), usage (3), databases (3), security (3), monitoring (3), monitor (3), connect (3), applications (3), certificate (3), authority (3), replication (3), capacity (3), quickstart (3), product (3), 한국어 (2), 日本語 (2), עברית (2), brasil (2), italiano (2), indonesia (2), français (2), américa (2), latina (2), deutsch (2), english (2), sign (2), terms (2), site (2), youtube (2), started (2), support (2), pricing (2), products (2), understand (2), other (2), last (2), updated (2), 2026 (2), utc (2), page (2), licensed (2), under (2), license (2), send (2), feedback (2), learn (2), what (2), instructions (2), how (2), version (2), describe (2), only (2), persistence_mode (2), shard_number (2), network_id (2), projects (2), locations (2), keyrings (2), cryptokeys (2), count (2), existing (2), granting (2), project_id (2), add (2), binding (2), gserviceaccount (2), com (2), role (2), before (2), copy (2), write (2), from (2), symmetric (2), user (2), over (2), documentation (2), sdk (2), languages (2), frameworks (2), infrastructure (2), costs (2), storage (2), observability (2), migration (2), industry (2), solutions (2), distributed (2), hybrid (2), multicloud (2), analytics (2), pipelines (2), compute (2), hosting (2), development (2), high (2), issues (2), troubleshoot (2), metrics (2), logs (2), info (2), shared (2), transit (2), configure (2), client (2), library (2), networks (2), connections (2), best (2), practices (2), console (2), technology (2), areas (2), close (2), subscribe, newsletter, our, third, decade, climate, action, join, cookies, privacy, tech, twitter, events, blog, engage, training, certification, architecture, center, getting, github, system, status, release, notes, community, forums, contact, sales, marketplace, all, easy, easytounderstand, solved, problem, solvedmyproblem, otherup, hard, hardtounderstand, incorrect, sample, incorrectinformationorsamplecode, missing, missingtheinformationsamplesineed, otherdown, tell, except, otherwise, noted, are, details, java, trademark, oracle, its, affiliates, developers, policies, apache, creative, commons, attribution, next, happens, rotate, behavior, which, verify, fields, kmskey, encryptioninfo, includes, whether, active, including, types, supports, one, values, database, deactivate, disabled, append, file, shards, creating, shard, operation, takes, several, minutes, complete, member, serviceaccount, roles, cloudkms, cryptokeyencrypterdecrypter, format, specific, after, both, different, long, algorithm, now, workflow, sure, admin, begin, new, deployments, gives, their, protection, level, rotation, schedule, permissions, cryptographic, boundaries, instead, owning, managing, keks, protect, these, save, categorize, preferences, stay, organized, collections, home, isn, resource, utilization, expensive, address, health, audit, self, simulate, find, windows, build, llm, powered, langchain, integrate, technologies, json, features, limitations, query, syntax, indexing, vectors, dropindex, _list, generative, back, custom, constraints, controls, per, basic, token, secure, configurations, connection, delete, prevent, deletion, replica, work, secondary, scaling, list, terraform, provisioned, automatically, vpcs, provisioning, get, environments, blocked, operational, guidelines, node, specification, single, zone, availability, replicas, discover, start, free, skip, main,

Text of the page (random words):
use customer managed encryption keys cmek memorystore for redis cluster google cloud documentation skip to main content technology areas close ai and ml application development application hosting compute data analytics and pipelines databases distributed hybrid and multicloud industry solutions migration networking observability and monitoring security storage cross product tools close access and resources management costs and usage management infrastructure as code sdk languages frameworks and tools console english deutsch español español américa latina français indonesia italiano português português brasil עברית 中文 简体 中文 繁體 日本語 한국어 sign in memorystore memorystore for redis cluster start free overview guides reference resources technology areas more overview guides reference resources cross product tools more console discover product overview high availability and replicas single zone instances cluster and node specification use best practices best practices operational guidelines client library code samples supported and blocked commands supported environments get started quickstart instance provisioning on a vpc network on a shared vpc network quickstart multiple vpcs set up multiple vpc networks using user registered connections set up multiple vpc networks for instances provisioned with automatically registered connections quickstart using terraform create and manage instances create instances list clusters view cluster information scale instance capacity about scaling instance capacity scale instance capacity manage cross region replication using secondary clusters about cross region replication work with cross region replication scale replica count prevent deletion of a cluster delete clusters connect networking networking about multiple vpc networking client library connection code samples connect to an instance configure configure an instance supported instance configurations secure and control access access control with iam iam authentication about iam authentication manage iam authentication manage basic token based authentication in transit encryption about in transit encryption use a per instance certificate authority ca use a shared certificate authority ca use a customer managed certificate authority ca security overview use vpc service controls manage resources with custom constraints customer managed encryption keys cmek about cmek use cmek back up data backups backups overview manage backups persistence persistence overview about rdb persistence about aof persistence manage rdb and aof persistence scale data vector search vector search for generative ai applications vector search commands vector search commands ft create ft search ft info ft _list ft dropindex info command metrics guides indexing vectors query syntax features and limitations about json memorystore for redis cluster ai integrate with ai technologies build llm powered applications using langchain connect to memorystore for redis cluster from ai applications maintenance about maintenance find and set maintenance windows simulate maintenance self service maintenance view maintenance logs monitor and troubleshoot monitor clusters monitor access using audit logs supported monitoring metrics troubleshoot issues address health issues expensive commands high resource utilization the maintenance policy isn t set ai and ml application development application hosting compute data analytics and pipelines databases distributed hybrid and multicloud industry solutions migration networking observability and monitoring security storage access and resources management costs and usage management infrastructure as code sdk languages frameworks and tools home documentation databases memorystore memorystore for redis cluster guides send feedback use customer managed encryption keys cmek stay organized with collections save and categorize content based on your preferences by using customer managed encryption keys cmek you have control over your keys this gives you control over their protection level location rotation schedule usage and access permissions and cryptographic boundaries instead of google owning and managing the symmetric key encryption keys keks that protect your data you control and manage these keys in cloud key management service kms note you can use cmek on new memorystore for redis cluster deployments only you can t enable cmek on existing clusters in memorystore for redis cluster also for more information about cmek for memorystore for redis cluster see about customer managed encryption keys cmek before you begin make sure that you have the redis admin role on your user account go to the iam page workflow to create a cluster that uses cmek create a key ring and key in the location where you want the cluster in memorystore for redis cluster to be copy or write down the key name key_name the location of the key and the name of the key ring key_ring you need this information when granting the service account access to the key grant the memorystore for redis cluster service account access to the key go to a project and create a cluster in memorystore for redis cluster with cmek enabled in the same region as the key ring and key your cluster is now enabled with cmek create a key ring and key create a key ring and key both must be in the same region as your cluster in memorystore for redis cluster the key can be from a different project as long as the key is in the same region also the key must use the symmetric encryption algorithm after you create the key ring and key copy or write down the key_name the key location and the key_ring you need this information when you grant the service account access to the key grant the memorystore for redis cluster service account access to the key before you can create a cluster in memorystore for redis cluster that uses cmek you must grant a specific memorystore for redis cluster service account access to the key you can grant the service account access to the key by using the gcloud cli to grant access to the service account use the following format service project_number cloud redis iam gserviceaccount com gcloud to grant the service account access to the key use the gcloud kms keys add iam policy binding command gcloud kms keys add iam policy binding projects project_id locations region_id keyrings key_ring cryptokeys key_name member serviceaccount service project_number cloud redis iam gserviceaccount com role roles cloudkms cryptokeyencrypterdecrypter make the following replacements project_id the id or number of the project that contains the key ring region_id the region where the key ring is located key_ring the name of the key ring that contains the key key_name the name of the key that you re granting access to the service account project_number the id or number of the project that contains the service account create a cluster that uses cmek you can create a cluster that uses cmek by using the gcloud cli note you can t enable cmek on existing clusters also this operation takes several minutes to complete gcloud to create a cluster that uses cmek use the gcloud redis clusters create command gcloud redis clusters create cluster_id project project_name region region_id network network_id kms key projects project_name locations region_id keyrings key_ring cryptokeys key_name shard count shard_number persistence mode persistence_mode make the following replacements cluster_id the id of the cluster that you re creating project_name the name of the project where you want to create the cluster region_id the id of the region where you want the cluster to be located network_id the id of the network that you want to use to create the cluster key_ring the name of the key ring that contains the key key_name the name of the key shard_number the number of shards that you want to have for the cluster persistence_mode the persistence mode for the cluster you can set this mode to one of the following values aof you enable append only file aof based persistence for the cluster disabled you deactivate persistence for the cluster rdb you enable redis database rdb based persistence for the cluster note for more information about persistence including the types of persistence that memorystore for redis cluster supports see persistence overview view key information for a cmek enabled cluster you can view information about your cmek enabled cluster by using the gcloud cli this information includes whether cmek is enabled for your cluster and the active key gcloud to verify if cmek is enabled and to see the key reference use the gcloud redis clusters describe command to view the encryptioninfo and kmskey fields gcloud redis clusters describe cluster_id project project_name region region_id make the following replacements cluster_id the id of the cluster about which you want to view information project_name the name of the project that contains the cluster region_id the id of the region where the cluster is located manage key versions for information about what happens when you disable destroy rotate enable and restore a key version see behavior of a cmek key version for instructions on how to disable and re enable key versions see enable and disable key versions for instructions on how to destroy and restore key versions see destroy and restore key versions what s next learn more about backups learn more about persistence send feedback except as otherwise noted the content of this page is licensed under the creative commons attribution 4 0 license and code samples are licensed under the apache 2 0 license for details see the google developers site policies java is a registered trademark of oracle and or its affiliates last updated 2026 07 10 utc need to tell us more easy to understand easytounderstand thumb up solved my problem solvedmyproblem thumb up other otherup thumb up hard to understand hardtounderstand thumb down incorrect information or sample code incorrectinformationorsamplecode thumb down missing the information samples i need missingtheinformationsamplesineed thumb down other otherdown thumb down last updated 2026 07 10 utc products and pricing see all products google cloud pricing google cloud marketplace contact sales support community forums support release notes system status resources github getting started with google cloud code samples cloud architecture center training and certification engage blog events x twitter google cloud on youtube google cloud tech on youtube about google privacy site terms google cloud terms manage cookies our third decade of climate action join us sign up for the google cloud newsletter subscribe english deutsch español español américa latina français indonesia italiano português português brasil עברית 中文 简体 中文 繁體 日本語 한국어