Hello, please review this knowledge centre article on rotating CMKs and this guide on KMS key rotation.
When you begin using the new KMS key, be sure to keep the original KMS key enabled so that AWS KMS can decrypt data that the original KMS key encrypted
https://aws.amazon.com/premiumsupport/knowledge-center/rotate-keys-customer-managed-kms/