The service can permanently destroy a managed key or key version once the deletion-protection recovery window has elapsed, after which data protected by it can no longer be decrypted.
Delete Key
CCC.KeyMgmt.CP19
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.TH01 | Key Versions are Deleted or Disabled | Disabling, scheduling deletion, or permanently purging KMS key versions that protect sensitive data can prevent required decryption or signing operations. Service interruption or irreversible data loss may occur if the key material is no longer recoverable. |