Security updates 2025-07-14

+ GCP europe-west4 to HIPAA supported regions
* Update CMEK procedure to correct a syntax error

Author: leticiawebb

docs/cloud/reference/supported-regions.md

@@ -85,6 +85,7 @@ Customers must sign a Business Associate Agreement (BAA) and request onboarding
 - AWS us-east-1 (N. Virginia)
 - AWS us-east-2 (Ohio)
 - AWS us-west-2 (Oregon)
+- GCP europe-west4 (Netherlands)
 - GCP us-central1 (Iowa)
 - GCP us-east1 (South Carolina)
 

docs/cloud/security/cmek.md

@@ -51,7 +51,7 @@ Once a service is encrypted with TDE, customers may update the key to enable CME
         "Sid": "Allow ClickHouse Access",
         "Effect": "Allow",
         "Principal": {
-            "AWS": "{ Encryption role ID }"
+            "AWS": [ "Encryption role ID " ]
         },
         "Action": [
             "kms:Encrypt",