AWS RDS KMS Key Deletion

  


  1. Run script to delete the KMS Key
  2. Once keys are deleted, AWS doesn't delete the key permanently, it just marks the keys for deletion only, makes the keys disabled and delete after 7 days.
  3. AWS RDS using the key, won't be accessible. And we will see below error instead [ inaccessible-encryption-credentials ]. instead
  4. Recovery, in order to recover the RDS database back, followed below steps
    1. enabled the KMS Key, such that its not longer scheduled for deletion
    2. Restore the RDS database snapshot
    3. Create a new RDS database instance, you can't use the exact name, must name it something different , lets call is DB-2
    4. Review all the details are correct such that Virtual Private Cloud, Security Group etc
    5. Delete the old RDS database ( DB-1 ) 
    6. Rename database DB-2 and DB-1
    7. Run all the tests and connectivity with database

Comments

Popular posts from this blog

What I learned this week - 19th June 2023

What I learned this week - 22nd May 2023