Ensuring Data Access: Key Management and Backup Strategies
Hi everyone, AWS mentioned that If the customer-managed key is accidentally deleted, we will lose access to encrypted data. right? 1-do you have any opinion for backup strategy? 2-How do we guarantee no data access loss in case of accidental key deletion?
- 언어
- English
질문됨 2년 전343회 조회
- 최신
- 최다 투표
- 가장 많은 댓글
Hello,
-
After a KMS key is deleted, you can no longer decrypt the data that was encrypted under that KMS key, which means that data becomes unrecoverable.
-
You should delete a KMS key only when you are sure that you don't need to use it anymore. If you are not sure, consider disabling the KMS key instead of deleting it. You can re-enable a disabled KMS key and cancel the scheduled deletion of a KMS key, but you cannot recover a deleted KMS key.
-
Restrict the key deletion access through IAM policies.
refer to below documentation regarding scheduling & deleting customer managed key.
답변함 2년 전
thanks .. I know, my question was how we can restrict deleting the key?