By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

CMK key rotation

0

Is there a way of manually rotating CMKs. I know KMS does it automatically every year but due to compliance reasons we require it done earlier. I saw a blog once that talked about it but I can’t find it now

Topics
Security, Identity, & ComplianceAWS Well-Architected Framework
Tags
AWS Key Management ServiceSecurity, Identity, & ComplianceSecurity
Language
English
rePost-User-9123442
asked 2 years ago339 views
1 Answer
2
Accepted Answer

Hello, please review this knowledge centre article on rotating CMKs and this guide on KMS key rotation.

When you begin using the new KMS key, be sure to keep the original KMS key enabled so that AWS KMS can decrypt data that the original KMS key encrypted

AWS
Kash
answered 2 years ago
profile picture
EXPERT
Giovanni Lauria
reviewed a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content