Removing CMK encryption on your QuickSight account
You can remove the default key to disable SPICE dataset encryption in your QuickSight account. Removing the key prevents new resources from encrypting on a CMK.
To remove CMK encryption for new SPICE datasets
-
On the QuickSight start page, choose Manage QuickSight, and then choose KMS keys.
-
On the KMS keys page, choose Manage to open the KMS keys dashboard.
-
Choose Actions (three dots) on the row of the default key, and then choose Delete.
-
In the pop-up box that appears, choose Remove.
After you delete the default key from your account, QuickSight stops encrypting new SPICE datasets. Any existing encrypted datasets stay encrypted until a full refresh occurs.
