GetKeyRotationStatusResponse

The following example retrieves detailed information about the rotation status for a KMS key, including whether automatic key rotation is enabled for the specified KMS key, the rotation period, and the next scheduled rotation date.

To retrieve the rotation status for a KMS key

var client = new AmazonKeyManagementServiceClient();
var response = client.GetKeyRotationStatus(new GetKeyRotationStatusRequest 
{
    KeyId = "1234abcd-12ab-34cd-56ef-1234567890ab" // The identifier of the KMS key whose key material rotation status you want to retrieve. You can use the key ID or the Amazon Resource Name (ARN) of the KMS key.
});

string keyId = response.KeyId; // Identifies the specified symmetric encryption KMS key.
bool keyRotationEnabled = response.KeyRotationEnabled; // A boolean that indicates the key material rotation status. Returns true when automatic rotation of the key material is enabled, or false when it is not.
DateTime nextRotationDate = response.NextRotationDate; // The next date that the key material will be automatically rotated.
DateTime onDemandRotationStartDate = response.OnDemandRotationStartDate; // Identifies the date and time that an in progress on-demand rotation was initiated.
int rotationPeriodInDays = response.RotationPeriodInDays; // The number of days between each automatic rotation. The default value is 365 days.