AWS KMS also enforces a waiting period of between 7 and 30 days before it will let you delete a key.
There’s also a feature you can enable that automatically rotates your key once a year. KMS is great!
There’s also a feature you can enable that automatically rotates your key once a year. KMS is great!
Why do you like their auto-rotation? The keys that are rotated out are not never disabled, so I don't really understand the benefit. In what scenario would their auto-rotation improve security?