How to delete AWS managed keys

0

Hello
I have 4 keys in us-east-1 for RDS, lambda, cloud9 and fsx. however, I have deleted all the resources that were using those keys long time ago but the keys are still there.
Is there any way to delete those keys?
or
is there a way to see what other resources might be using those keys?

thanks
RT

rtt
demandé il y a 5 ans2923 vues
2 réponses
0

hello RT,

You cannot delete AWS managed keys. Customers do not have management control over AWS managed keys.

You can use CloudTrail logs to monitor usage of those keys. Details can be found here: https://docs.aws.amazon.com/kms/latest/developerguide/logging-using-cloudtrail.html

AWS
répondu il y a 5 ans
0

Dear all supports,

I accidentally lock all the account from a particular key. Effect deny Principal account id:root Action : kms reEncrypt*, generatedataley*, encrypt, describekey, decrypt Resource *

How to resolve this issue?

McDs23
répondu il y a un an

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions