What can be done to implement the above policy?

A company has a customer master key (CMK) with imported key materials. Company policy requires that all encryption keys must be rotated every year.

What can be done to implement the above policy?
A . Enable automatic key rotation annually for the CM
C . Use AWS Command Line interface to create an AWS Lambda function to rotate the existing CMK annually.
D . Import new key material to the existing CMK and manually rotate the CM
F . Create a new CMK, import new key material to it, and point the key alias to the new CM

View Answer

Answer: C

Explanation:

Reference: https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html