AWS KMS Key Disabled or Scheduled for Deletion

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•2•0•42

Detects when an AWS Key Management Service (KMS) key is disabled or scheduled for deletion. This activity can indicate an attempt to disrupt services, destroy data, or hinder forensic analysis by making encrypted data inaccessible.