Rotate Key

Rotate KMS key. Generates new key material for the key and increments its version. Previous key material is retained so existing ciphertexts remain decryptable; new encrypt operations use the new material. Only supported for encrypt-decrypt keys.

POST /api/v1/kms/keys/{keyId}/rotate

cURL

cURL

curl --request POST \
  --url https://us.infisical.com/api/v1/kms/keys/{keyId}/rotate

200

{
  "key": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "orgId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "name": "<string>",
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z",
    "encryptionAlgorithm": "<string>",
    "description": "<string>",
    "isDisabled": false,
    "projectId": "<string>",
    "keyUsage": "encrypt-decrypt",
    "kmipMetadata": null,
    "isExportable": true,
    "version": 1
  }
}

Path Parameters

keyId · string<uuid> · required

The ID of the key to be rotated.

Response

200

application/json

Default Response

key · object · required

Show child attributes