Help Center> Data Encryption Workshop> User Guide> Key Management Service> Managing CMKs> Deleting One or More CMKs
Updated on 2023-01-31 GMT+08:00
View PDF

Deleting One or More CMKs

Before deleting the CMK, confirm that it is not in use and will not be used. You can check the key usage in audit logs.

Prerequisites

  • The CMK you want to schedule deletion for is in Enabled or Disabled status.

Constraints

  • A key will not be deleted until its scheduled deletion period expires. You can set the period to a value within the range 7 to 1096 days.

    Before the specified deletion date, you can cancel the deletion if you want to use the CMK. Once the scheduled deletion has taken effect, the CMK will be deleted permanently and you will not be able to decrypt data encrypted by the CMK. Exercise caution when performing this operation.

  • For details about the billing information about a CMK scheduled to be deleted, see Will a CMK Be Charged After It Is Scheduled to Delete?
  • Default Master Keys created by KMS cannot be scheduled for deletion.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click . Choose Security & Compliance > Data Encryption Workshop.
  4. In the row containing the desired CMK, click Delete.

    Figure 1 Scheduling the deletion of one CMK

  5. In the dialog box that is displayed, enter the number of days after which you want the deletion to take effect.

    Figure 2 Entering the period after which you want the deletion to take effect
    • A key will not be deleted until its scheduled deletion period expires. You can set the period to a value within the range 7 to 1096 days. Before the specified deletion date, you can cancel the deletion if you want to use the CMK.
    • For details about the billing information about a CMK scheduled to be deleted, see Will a CMK Be Charged After It Is Scheduled to Delete?

  6. In the dialog box that is displayed, select I understand the impact of deleting keys and click OK.

    To schedule the deletion of multiple CMKs at a time, select them and click Delete in the upper left corner of the list.

Parent topic: Managing CMKs