Symmetric CMKs should have encryption key rotation enabled
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください。
Description
AWS Key Management Service (KMS) allows for backing key rotation, which involves updating the key material tied to a Customer Managed Key (CMK). Rotation of symmetric keys is recommended to minimize the risk of key compromise, as it ensures new data is encrypted with a fresh key. Prior backing keys are retained for seamless decryption of previously encrypted data. Symmetric key rotation is automated annually, though it is not available for asymmetric keys.
For instructions on enabling CMK key rotation in AWS KMS, refer to the AWS Key Rotation Guide.
