Automatically rotate CMKs quarterly

0

Hi AWS enthusiast,

I am working on a project that require me to rotate the CMKs automatically each quarter. Therefore, I create this case to ask for the solution to implement this requirement. Also, if you know any special consideration when implement this issue for example the services using the CMKs will be interrupted when rotatation, please notice me.

Thanks, Steven

  • Other than being your project requirement, will you be able to share a specific reason that key has to be rotated every quarter? Curious to know the motivation behind frequent rotation.

Steven
질문됨 9달 전260회 조회
1개 답변
0

Automatic Key Rotation will rotate key material once per year https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html#rotate-keys-how-it-works

There isn't a setting in KMS to make this happen more frequently, to rotate keys quarterly (as in your case) you would have to disable automatic key rotation and rotate the keys manually https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html#rotate-keys-manually

You might prefer to rotate keys manually so you can control the rotation frequency

This knowledge document goes through the steps to do this https://repost.aws/knowledge-center/rotate-keys-customer-managed-kms and the accompanying video is at https://www.youtube.com/watch?v=zTIqkPfLNjI

profile picture
전문가
Steve_M
답변함 9달 전
profile picture
전문가
검토됨 9달 전
profile pictureAWS
전문가
검토됨 9달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠