Free AWS Certified Developer Associate DVA-C02 Practice Question

Key rotation refers to the process of replacing an old encryption key with a new one. Enabling automatic key rotation in Amazon Web Services ensures that keys are automatically rotated every year. This practice limits the amount of data encrypted with a single key, reducing security risks associated with the long-term use of a single key. Manually rotating keys would involve a user manually triggering rotation, which is not recommended due to human error and lack of regularity. Master key refers to a different concept unrelated to the rotation process, and key expiry is a concept where the key becomes unusable after a predefined validity period, which is also different from rotation.