How to delete AWS managed keys

Question

Hello   
I have 4 keys in us-east-1 for RDS, lambda, cloud9 and fsx.  however, I have deleted all the resources that were using those keys long time ago but the keys are still there.  
Is there any way to delete those keys?  
or   
is there a way to see what other resources might be using those keys?  
  
thanks  
RT

Answer

hello RT,  
  
You cannot delete AWS managed keys. Customers do not have management control over AWS managed keys.   
  
You can use CloudTrail logs to monitor usage of those keys. Details can be found here: https://docs.aws.amazon.com/kms/latest/developerguide/logging-using-cloudtrail.html

Answer

Dear all supports,

I accidentally lock all the account from a particular key.
Effect deny
Principal account id:root
Action : kms reEncrypt*, generatedataley*, encrypt, describekey, decrypt
Resource *

How to resolve this issue?

How to delete AWS managed keys

相關內容