AWS Certified Data Analytics Specialty 2021 – Hands-On - KMS Key Rotation

The video tutorial explains key rotation for customer-managed CMKs, focusing on both automatic and manual methods. Automatic key rotation occurs annually, keeping the CMK ID the same while changing the backing key. Manual rotation allows for more frequent changes, creating a new CMK ID. Using aliases is recommended to manage key changes seamlessly, ensuring applications remain unaffected. The tutorial concludes with exam tips, emphasizing the importance of understanding key rotation periods and alias usage.

What is the significance of the CMK ID in the context of key rotation?

Explain the difference between automatic key rotation and manual key rotation.

What happens to the old key when a new key is created manually?

Why is it recommended to use aliases when encrypting and decrypting data?

What is the frequency of automatic key rotation for a customer managed CMK?