Object uploads that use customer-managed encryption keys (CMEK) now fail if the Cloud Storage service agent lacks the...

Object uploads that use customer-managed encryption keys (CMEK) now fail if the Cloud Storage service agent lacks the necessary IAM role to decrypt the object. For steps to grant the required role, see Assign a Cloud KMS key to a service agent.