Google-Managed Key rotation schedule

[KastriotAhmeti]

Hello, I would like to know if there in fact is a schedule in place, that rotates KEKs (Key Encryption Keys) periodically, and how long is the timeframe? On the GCP Documentation it says that keys are rotated on a schedule, but it is nowhere mentioned in details. Also on one of Google community threads, a Google Support employee mentions that the default rotation period inside the Keystore is 90 days, I want to confirm this.

[DamianS]

Hello @KastriotAhmeti  ,Welcome on Google Cloud Community.

I've found under documentation following sentence:  "Some security regulations require periodic, automatic key rotation. Automatic key rotation at a defined period, such as every 90 days, increases security with minimal administrative complexity." Additionally, when I've tried to create key, default is 90 days.

You can manually rotate keys, whenever you want. 

--
cheers,
DamianS
LinkedIn medium.com Cloudskillsboost