Secure your application encryption keys without storing credentials in Pega. This video demonstrates how to configure Pega Application Data Encryption with Google Cloud KMS using Bring Your Own Secrets. Learn how Identity Federation establishes connectivity between Pega and GCP without requiring credentials to be stored in Pega, and how an External Secret Store securely retrieves the KMS master key ID from Google Secret Manager. By externalizing authentication and secret management, organizations can reduce exposure of sensitive information while simplifying KMS integration. The video also highlights similar support available for Amazon KMS.