
    AWS KMS now supports on-demand rotation of symmetric encryption keys with imported key material, allowing organizations to rotate cryptographic keys without changing the key identifier while maintaining security and compliance standards.


<div>
<p>
AWS Key Management Service (KMS) has launched on-demand key rotation for symmetric encryption keys with imported key material, providing enhanced security and compliance capabilities.
</p>
<ul>
<li>Allows rotation of Bring Your Own Keys (BYOK) without changing key identifier</li>
<li>Supports both immediate and scheduled key rotation</li>
<li>Enables organizations to meet internal security policies</li>
<li>Provides zero downtime and backwards compatibility</li>
<li>Available in all AWS Regions, including GovCloud and China Regions</li>
</ul>
<p>
The feature helps organizations improve their key management practices by allowing flexible and seamless cryptographic key material rotation while maintaining existing key references.
</p>
</div>


AWS KMS launches on-demand key rotation for imported keys

Related articles

Related articles

Jun 6
2025
How to use on-demand rotation for AWS KMS imported keys

Apr 12
2024
The curious case of faster AWS KMS symmetric key rotation

Apr 28
2026
AWS KMS now tracks last usage of all KMS keys

Nov 6
2025
AWS Backup now supports AWS KMS customer managed keys with logically air-gapped vaults