Zero-Downtime Key Encryption Key (KEK) Rotation
Rotate tenant master encryption keys without incurring database table locks or service downtime.
Executing Master Key Rotation
Rotating the master key requires the global admin scope. The operation mints a new 256-bit symmetric key, registers it in kek_versions, and marks it as the primary encryption key:
POST /v1/secrets/keys/rotateAuth
Request
POST/v1/secrets/keys/rotate
Response