Automatically rotate CMKs quarterly

0

Hi AWS enthusiast,

I am working on a project that require me to rotate the CMKs automatically each quarter. Therefore, I create this case to ask for the solution to implement this requirement. Also, if you know any special consideration when implement this issue for example the services using the CMKs will be interrupted when rotatation, please notice me.

Thanks, Steven

  • Other than being your project requirement, will you be able to share a specific reason that key has to be rotated every quarter? Curious to know the motivation behind frequent rotation.

Steven
質問済み 9ヶ月前260ビュー
1回答
0

Automatic Key Rotation will rotate key material once per year https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html#rotate-keys-how-it-works

There isn't a setting in KMS to make this happen more frequently, to rotate keys quarterly (as in your case) you would have to disable automatic key rotation and rotate the keys manually https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html#rotate-keys-manually

You might prefer to rotate keys manually so you can control the rotation frequency

This knowledge document goes through the steps to do this https://repost.aws/knowledge-center/rotate-keys-customer-managed-kms and the accompanying video is at https://www.youtube.com/watch?v=zTIqkPfLNjI

profile picture
エキスパート
Steve_M
回答済み 9ヶ月前
profile picture
エキスパート
レビュー済み 9ヶ月前
profile pictureAWS
エキスパート
レビュー済み 9ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ