What is the impact of swapping CMKs that encrypt a DDB table?

0

We have a production DDB Table that is encrypted with CMK A. Using CDK, we are going to redeploy the stack to create CMK B and change the encryption key for the DDB Table to CMK B. What are the implications, if any, of making the change?

已提問 4 年前檢視次數 861 次
1 個回答
0
已接受的答案

DynamoDB maintains a key hierarchy for the table and wraps the “table key” with the CMK.

Changing the CMK simply means re-wrapping the top of the table’s key hierarchy.

https://docs.aws.amazon.com/kms/latest/developerguide/services-dynamodb.html

AWS
已回答 4 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南