AWS Certified Data Analytics Specialty 2021 - Hands-On! - Amazon Web Services Key Management Service (AWS KMS) Key Rotat

The video tutorial covers key rotation for customer-managed CMKs, explaining both automatic and manual methods. Automatic key rotation occurs annually, while manual rotation can be set to different intervals. The use of aliases is recommended to manage key changes without affecting applications. The process of updating aliases to point to new keys is detailed, ensuring seamless application interaction. Key points for exams are highlighted, emphasizing the importance of understanding rotation periods and alias management.

What is the frequency of automatic key rotation for a customer-managed CMK?

• Every 90 days

• Every 6 months

• Every 1 year

• Every 2 years

When performing manual key rotation, what is a recommended practice to ensure applications are not affected?

• Change the CMK ID

• Delete the old key immediately

• Use a different encryption algorithm

• Utilize aliases

What is the main advantage of using aliases during key rotation?

• It reduces storage requirements

• It increases encryption speed

• It hides key changes from applications

• It allows for longer key lengths

How does updating an alias affect the application during manual key rotation?

• The change is transparent to the application

• The application will lose access to old data

• The application will detect the change

• The application must be restarted

For exam purposes, what is the key difference between automatic and manual key rotation?

• Manual rotation is only for AWS managed CMKs

• Manual rotation allows for flexible intervals

• Automatic rotation requires more resources

• Automatic rotation is more secure