CMK key rotation

Question

Is there a way of manually rotating CMKs. I know KMS does it automatically every year but due to compliance reasons we require it done earlier. I saw a blog once that talked about it but I can’t find it now

Dominic_M
2 年前
https://aws.amazon.com/premiumsupport/knowledge-center/rotate-keys-customer-managed-kms/

Accepted Answer

Hello, please review [this](https://aws.amazon.com/premiumsupport/knowledge-center/rotate-keys-customer-managed-kms/) knowledge centre article on rotating CMKs and [this](https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html) guide on KMS key rotation.

When you begin using the new KMS key, be sure to keep the original KMS key enabled so that AWS KMS can decrypt data that the original KMS key encrypted

CMK key rotation

相關內容