来源：https://stackoverflow.com/questions/60763521/restricting-encrypt-decrypt-permissions-for-a-cloud-kms-key-with-cmek-and-cloud 标签 google-cloud-storage google-cloud-kms
