What is the impact of swapping CMKs that encrypt a DDB table?

0

We have a production DDB Table that is encrypted with CMK A. Using CDK, we are going to redeploy the stack to create CMK B and change the encryption key for the DDB Table to CMK B. What are the implications, if any, of making the change?

1 Answer
1
Accepted Answer

DynamoDB maintains a key hierarchy for the table and wraps the “table key” with the CMK.

Changing the CMK simply means re-wrapping the top of the table’s key hierarchy.

https://docs.aws.amazon.com/kms/latest/developerguide/services-dynamodb.html

AWS
answered 4 years ago
profile picture
EXPERT
reviewed 6 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions