Comments - how to clear AWS key caching on Mariadb.
Content reproduced on this site is the property of its respective owners,
and this content is not reviewed in advance by MariaDB. The views, information and opinions
expressed by this content do not necessarily represent those of MariaDB or any other party.
Thank you for the advice, I tried the alter table and it works. So this approach is more of a manual process, I was also looking at the innodb_encryption_rotate_key_age but don't know how to force test this feature, do you happen to know?
You mentioned the "aws-kms-key.<id>.<version>" ... I was testing deletion of these keys and I was not able to bring up MariaDB service. Do you how to fix this? beside having a backup "aws-kms-key.<id>.<version>" key?
If you use key id = 2, and you change it to key id = 3, in alter table then you would not need aws-kms-key.2.<whatever>
But you can't remove *all* keys, and this is not what I meant. There must be some aws-kms-key.<id>.<version>, for the key ids and versions that are still in use. Because these files contain the encrypted keys, which AWS KMS would decrypt at startup.
Thank you for the explaination.