Comments - how to clear AWS key caching on Mariadb.

2 years, 9 months ago tg mai

Thank you for the advice, I tried the alter table and it works. So this approach is more of a manual process, I was also looking at the innodb_encryption_rotate_key_age but don't know how to force test this feature, do you happen to know?

You mentioned the "aws-kms-key.<id>.<version>" ... I was testing deletion of these keys and I was not able to bring up MariaDB service. Do you how to fix this? beside having a backup "aws-kms-key.<id>.<version>" key?

 
2 years, 9 months ago Vladislav Vaintroub

If you use key id = 2, and you change it to key id = 3, in alter table then you would not need aws-kms-key.2.<whatever>

But you can't remove *all* keys, and this is not what I meant. There must be some aws-kms-key.<id>.<version>, for the key ids and versions that are still in use. Because these files contain the encrypted keys, which AWS KMS would decrypt at startup.

 
2 years, 9 months ago tg mai

Thank you for the explaination.

 
Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.