The service can rotate a managed key on demand by generating a new key version, while retaining prior versions for decryption.
Manual Key Rotation
CCC.KeyMgmt.CP21
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.TH03 | Key Rotation is Disabled or Delayed Beyond Policy Limits | Modification of automatic or manual rotation settings can keep older key material active longer than intended, decreasing cryptographic resilience and extending exposure in the event of key compromise. |