According AWS KMS, keys can be rotated once every year. However, there is no way I can define a custom time period for that.
However, I can keep changing the same in the bucket's policy manually.
So, is there anyway I can automate that?
DevOps Stack Exchange is a question and answer site for software engineers working on automated testing, continuous delivery, service integration and monitoring, and building SDLC infrastructure. It only takes a minute to sign up.Sign up to join this community
The AWS documentation is clear that automated key rotation is only supported by Amazon on a yearly basis. However, you can use the CLI to manually create new keys, and then use an automation technique such as cron to automate the manual process.