A. Change the customer managed CMK key policy to enable automatic key rotation.
B. Use AWS managed CMKs instead of customer managed CMKs so that AWS will rotate the keys automatically.
C. Invoke an AWS Lambda function regularly to rotate the backing key of each customer managed CMK.
D. Enable automatic key rotation for each customer managed CMK after it has been created in AWS KMS.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.