Rotating keys in KMS

Rotating keys regularly is a best practice that needs to be followed while using keys. Key rotation may also be a requirement based on regulatory rules or corporate policies. These rules and policies may also provide guidelines on the key rotation frequencies. We will look at the different cases of key rotation within this recipe.

Getting ready

We need a working AWS account to complete this recipe. Follow the Creating Keys in KMS recipe and create a CMK with AWS key material.

How to do it...

We can specify automatic key rotation every year (365 days...