Disabling, scheduling deletion, or permanently purging KMS key versions that protect sensitive data can prevent required decryption or signing operations. Service interruption or irreversible data loss may occur if the key material is no longer recoverable.
Key Versions are Deleted or Disabled
CCC.KeyMgmt.TH01
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Core.CP18 | Resource Versioning | The service automatically assigns versions to child resources which can be used to preserve, retrieve, and restore past iterations. |
| CCC.Core.CP32 | Deletion Protection | The service may be configured to block the deletion of a child resource, or to retain a deleted child resource for a recovery window during which it can be restored. |
| CCC.KeyMgmt.CP16 | Disable Key | The service can disable a managed key or key version so that cryptographic operations with it are rejected until it is re-enabled, without deleting the key material. |
| CCC.KeyMgmt.CP19 | Delete Key | The service can permanently destroy a managed key or key version once the deletion-protection recovery window has elapsed, after which data protected by it can no longer be decrypted. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.CN05 | Enforce a Key Deletion Recovery Window | Ensure that destroyed key material remains recoverable long enough to detect and reverse an unintended deletion. |