Enabling or disabling keys

You can enable or disable a key by using either the AWS console or the KMS API. The following steps describe the process of enabling or disabling a key using the AWS console:

1. Repeat steps 1 and 2 from the Creating a CMK section.

2. Click on the key that you want to enable or disable and then click on the Key actions menu. By selecting Enable or Disable from the Key actions menu, you can enable or disable the key:

Figure 18.13: Enabling or disabling a key