What is the impact of swapping CMKs that encrypt a DDB table?

We have a production DDB Table that is encrypted with CMK A. Using CDK, we are going to redeploy the stack to create CMK B and change the encryption key for the DDB Table to CMK B. What are the implications, if any, of making the change?

主题

安全、身份和合规性数据库

标签

AWS 智能钥匙管理服务 Amazon DynamoDB

语言

English

AWS-User-3535486

已提问 4 年前861 查看次数

1 回答

最新
投票最多
评论最多

这些答案有用吗？为正确答案投票，以帮助社区从您的知识中受益。

已接受的回答

DynamoDB maintains a key hierarchy for the table and wraps the “table key” with the CMK.

Changing the CMK simply means re-wrapping the top of the table’s key hierarchy.

https://docs.aws.amazon.com/kms/latest/developerguide/services-dynamodb.html

pmod-AWS

已回答 4 年前

What is the impact of swapping CMKs that encrypt a DDB table?

相关内容