A new 'EncryptionConfig' schema has been added, which includes a 'kmsKeyName' field for specifying a Cloud KMS key. This configuration is now available via the 'encryptionConfiguration' property on the 'QueryTemplate' resource. When set, the specified key is used to encrypt the query template definition body, providing an extra layer of security for sensitive query logic. Additionally, documentation for service account usage in AI Inference and Bigtable configurations was updated to fix broken reference links.
Medium Impact
Docs