Is there a way of manually rotating CMKs. I know KMS does it automatically every year but due to compliance reasons we require it done earlier. I saw a blog once that talked about it but I can’t find it now
Hello, please review this knowledge centre article on rotating CMKs and this guide on KMS key rotation.
When you begin using the new KMS key, be sure to keep the original KMS key enabled so that AWS KMS can decrypt data that the original KMS key encrypted
AWS OFICIALAtualizada há 2 meses
https://aws.amazon.com/premiumsupport/knowledge-center/rotate-keys-customer-managed-kms/