An organizational must establish the ability to delete an AWS KMS Customer Master Key (CMK) within a 24-hour timeframe to keep it from being used for encrypt or decrypt operations.
Which of the following actions will address this requirement?
Manually rotate a key within KMS to create a new CMK immediately.
Use the KMS import key functionality to execute a delete key operation.
Use the schedule key deletion function within KMS to specify the minimum wait period for deletion.
Change the KMS CMK alias to immediately prevent any services from using the CMK.
I sort that the answer is:
Use the KMS import key functionality to execute a delete key operation.