CmdID / aws / aws redshift
aws redshift rotate-encryption-key
Rotates the encryption keys for a cluster. AWS CLI reference
1 example 1 option Its page in the AWS CLI reference
Examples
To rotate encryption key for a cluster
The following rotate-encryption-key example rotates the encryption key for the specified cluster.
aws redshift rotate-encryption-key --cluster-identifier myclusterIdentify--cluster-identifierThe unique identifier of the cluster that you want to rotate the encryption keys for.Its output, shortened
{
"Cluster": {
"ClusterIdentifier": "mycluster",
"NodeType": "dc2.large",
"ClusterStatus": "rotating-keys",
"ClusterAvailabilityStatus": "Modifying",
"MasterUsername": "adminuser",
"DBName": "dev",
"Endpoint": {
"Address": "mycluster.cmeaswqeuae.us-west-2.redshift.amazonaws.com",
"Port": 5439
},
"ClusterCreateTime": "2019-12-10T19:25:45.886Z",
"AutomatedSnapshotRetentionPeriod": 30,
"ManualSnapshotRetentionPeriod": -1,
"ClusterSecurityGroups": [],
"VpcSecurityGroups": [
{
"VpcSecurityGroupId": "sh-a1a123ab",
"Status": "active"
}
],
"ClusterParameterGroups": [
{
"ParameterGroupName": "default.redshift-1.0",
"ParameterApplyStatus": "in-sync"
}
],
"ClusterSubnetGroupName": "default",
"VpcId": "vpc-a1abc1a1",
… 22 more linesFor more information, see Amazon Redshift Database Encryption in the Amazon Redshift Cluster Management Guide.
Options
--cluster-identifierThe unique identifier of the cluster that you want to rotate the encryption keys for.