Study. uk . com
  1. Home
  2. All questions
  3. Question 58

AWS Certified Solutions Architect study material · question 58 of 500

Which two key types can only be rotated manually, by creating a replacement key? Choose two.

  1. Symmetric customer managed keys
  2. AWS managed keys
  3. Asymmetric KMS keys
  4. KMS keys in custom key stores
Show the answer

Answer: C. Asymmetric KMS keys
D. KMS keys in custom key stores

Asymmetric keys, HMAC keys and keys in custom key stores are ineligible for automatic or on-demand rotation, so a replacement key is the only route.

Source: Rotate AWS KMS keys (Amazon Web Services) — Rotate AWS KMS keys

Challenge yourself on this topic → Study as cards