Study. uk . com
  1. Home
  2. All questions
  3. Question 107

AWS Certified Solutions Architect study material · question 107 of 500

What does enabling automatic rotation on a customer managed key do by default?

  1. KMS creates a replica key in another Region
  2. KMS generates new key material once a year unless a custom period is set
  3. KMS generates new key material every 90 days
  4. KMS deletes the previous key material
Show the answer

Answer: B. KMS generates new key material once a year unless a custom period is set

Automatic rotation defaults to yearly, and a custom rotation period in days can be specified instead.

Source: Rotate AWS KMS keys (Amazon Web Services) — Rotate AWS KMS keys

Challenge yourself on this topic → Study as cards