1. Open the Google Cloud Console and navigate to the Bigtable instance that needs to be remediated.
2. Click on the name of the instance to open its details page.
3. In the left-hand menu, click on “Encryption”.
4. Under “Encryption at rest”, select “Customer-managed encryption keys (CMEK)”.
5. Choose a key from the list of existing keys or create a new one by clicking on “Create a key”.
6. If creating a new key, enter a name and select a location for the key.
7. Click “Create” to create the key.
8. Once a key is selected or created, click “Save” to enable encryption for the Bigtable instance.
9. Repeat these steps for each Bigtable instance that needs to be remediated.

​

1. Open the Cloud Shell in the GCP Console.
2. Run the following command to list all the Bigtable instances in the project:

gcloud bigtable instances list

3. Select the Bigtable instance for which you want to enable encryption.
4. Run the following command to enable encryption for the selected Bigtable instance:

gcloud beta bigtable instances update [INSTANCE_ID] --cluster [CLUSTER_ID] --encryption-at-rest-kms-key-name [KMS_KEY_NAME]

5. Verify that encryption is enabled for the Bigtable cluster by running the following command:

gcloud beta bigtable clusters describe [CLUSTER_ID] --instance [INSTANCE_ID]

1. First, you need to install the required libraries. You can install the google-cloud-bigtable library using the following command:

pip install google-cloud-bigtable

2. Next, you need to create a client object for Bigtable. You can do this using the following code:

from google.cloud import bigtable

# Create a client object for Bigtable
client = bigtable.Client(project='PROJECT_ID', admin=True)

3. Once you have created the client object, you can get a list of all the Bigtable instances in your project using the following code:

# Get a list of all the Bigtable instances in the project
instances = client.list_instances()

4. For each instance, you can get a list of all the tables and check if the tables are encrypted or not using the following code:

# Loop through all the instances
for instance in instances:
    # Get a list of all the tables in the instance
    tables = instance.list_tables()
    # Loop through all the tables
    for table in tables:
        # Check if the table is encrypted or not
        if not table.encryption_type:
            # If the table is not encrypted, enable encryption
            table.encryption_type = 'GOOGLE_DEFAULT_ENCRYPTION'
            table.update()

5. Finally, you can save the changes by calling the update() method on the table object.