alibaba-live-kms-key-mutation-guard

【数据与研究】Gate KMS key deletion and disable operations. All data encrypted with a deleted CMK (OSS SSE-KMS, ECS encrypted disks, RDS/PolarDB TDE) becomes permanently and irrecoverably inaccessible. This guard enforces complete CMK dependency audits, deletion window confirmation, and explicit operator approval before any key state mutation.

独立 GitHub 快照 · 自动分类 · 以原作者文档为准