Hello, I have a couple questions about key rotation when using encryption at rest with AWS KMS to manage our keys. I’m fairly new to mongodb and the clusters were set up by someone else who is no longer it us so i’m fumbling through learning as quickly as I can. So these questions may seem basic but I haven’t found a clear cut answer yet.
-
Currently we are prompted to change our keys every 90 days for all our clusters, I have to find where to change this. Is there a way to change this or does the encryption at rest have to be turned off and completely configured?
-
I have just set our CMK’s in AWS to auto rotate, when they rotate will this rotate them in mongodb or do we will have to manually go in and change to the new key in the cluster every time the AWS key rotates?