Study. uk . com
  1. Home
  2. All questions
  3. Question 59

AWS Certified Solutions Architect study material · question 59 of 500

A data key generated by a KMS key has leaked. What does rotating that KMS key achieve?

  1. It revokes every grant issued on the KMS key
  2. Nothing for the leaked data key, because rotation does not re-encrypt data or rotate data keys
  3. It invalidates the leaked data key immediately
  4. It re-encrypts all data protected by the KMS key
Show the answer

Answer: B. Nothing for the leaked data key, because rotation does not re-encrypt data or rotate data keys

Key rotation replaces only the KMS key's own material; it neither rotates the data keys it produced nor re-encrypts the protected data.

Source: Rotate AWS KMS keys (Amazon Web Services) — Note

Challenge yourself on this topic → Study as cards