1 Answers
Hi Leneche
When it comes to customer-managed CMKs, you have the option to either choose an external KeyMaterial or Key Material generated by KMS.
I believe the automatic rotation (optional) is available for symmetric customer managed CMKs that use AWS KMS.
Please refer to the following FAQs page for more information. (espl. the question Why should I create my own customer master keys?)
https://aws.amazon.com/kms/faqs/
Cheers
Anirudh
Thanks Anirudh! I’ll look into the FAQs
I see that it states "You can define an alias and description for the key and opt-in to have the key automatically rotated once per year if it was generated by AWS KMS."