By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

What is the impact of swapping CMKs that encrypt a DDB table?

0

We have a production DDB Table that is encrypted with CMK A. Using CDK, we are going to redeploy the stack to create CMK B and change the encryption key for the DDB Table to CMK B. What are the implications, if any, of making the change?

Topics
Security, Identity, & ComplianceDatabase
Tags
AWS Key Management ServiceAmazon DynamoDB
Language
English
AWS-User-3535486
asked 4 years ago834 views
1 Answer
0
Accepted Answer

DynamoDB maintains a key hierarchy for the table and wraps the “table key” with the CMK.

Changing the CMK simply means re-wrapping the top of the table’s key hierarchy.

https://docs.aws.amazon.com/kms/latest/developerguide/services-dynamodb.html

AWS
pmod-AWS
answered 4 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content