Changing the default CMK
You can change the default key to another key that already exists in the KMS keys dashboard. When you change the default key, all new QuickSight data is encrypted on the new key. The new default key changes how new QuickSight data is encrypted. However, existing QuickSight data will continue to use the previous default key.
To learn more about which data can be managed with the key, see Encrypting your QuickSight data with AWS Key Management Service customer-managed keys.
To change the default key to an existing key
-
On the QuickSight start page, choose Manage QuickSight, and then choose KMS keys.
-
On the AWS KMS keys page, choose MANAGE to open the KMS keys dashboard.
-
Navigate to the key that you want to set as your new default. Choose Actions (three dots) on the row of the key that you want to open the key's menu.
-
Choose Set as default.
The selected key is now your default key.
