Approval of GCP as a Public Cloud TEE

[renanfel]

Following our publication of the Public Cloud TEE requirements explainer, we are posting the details on the review and approval for GCP, using the CSP template provided in the explainer. We’ll keep this issue open for a few weeks for feedback from the ecosystem.

Name and web address for the Cloud Service Provider:

Google Cloud (GCP), https://cloud.google.com/

Short description of the Cloud TEE solution, including security properties, remote attestation and workload capabilities. Please include links to supporting documentation:

GCP provides a commercially available Cloud TEE solution using Confidential Space, built on top of the Confidential VM product. Confidential Space provides secure, private and isolated environments, which the operator and CSP cannot access. GCP further provides an Attestation process for the environments. Confidential Space can run Linux-based containerized workloads.

Short description of security and trust of the CSP, including compliance with ISO standards, Certification from cloud security industry bodies (such as STAR Level 2), and inclusion in a research report on public cloud offerings (such as Gartner’s public cloud report). Please include links to supporting documentation.

GCP meets the ISO 27001, 27017, and ISO 27018 standards and obtained Level 2 in the CSA STAR Registry. The Confidential Space security model is documented, and partially supported by an independent security report. GCP is included in Gartner’s public cloud report. GCP (Google) is headquartered in the US.