The service can disable a managed key or key version so that cryptographic operations with it are rejected until it is re-enabled, without deleting the key material.
Disable Key
CCC.KeyMgmt.CP16
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.TH01 | Key Versions are Deleted or Disabled | Disabling, scheduling deletion, or permanently purging KMS key versions that protect sensitive data can prevent required decryption or signing operations. Service interruption or irreversible data loss may occur if the key material is no longer recoverable. |