AWS Certified Data Analytics Specialty 2021 – Hands-On - KMS Key Rotation

The video tutorial explains key rotation for customer-managed CMKs, focusing on both automatic and manual methods. Automatic key rotation occurs annually, keeping the CMK ID the same while changing the backing key. Manual rotation allows for more frequent changes, creating a new CMK ID. Using aliases is recommended to manage key changes seamlessly, ensuring applications remain unaffected. The tutorial concludes with exam tips, emphasizing the importance of understanding key rotation periods and alias usage.

What is the frequency of automatic key rotation for a customer-managed CMK?

• Every 2 years

• Every 1 year

• Every 5 years

• Every 6 months

When performing manual key rotation, what happens to the CMK ID?

• It remains the same

• It is deleted

• It changes

• It is duplicated

What is the recommended rotation period for manual key rotation?

• Every 60 days

• Every 90 or 180 days

• Every 30 days

• Every 365 days

Why is it beneficial to use aliases during key rotation?

• To increase security

• To reduce costs

• To hide key changes from applications

• To improve performance

How does updating an alias affect application interaction with keys?

• It increases application latency

• It causes application downtime

• It makes key changes transparent to applications

• It requires application reconfiguration