https://community.cloudera.com/t5/Support-Questions/KMS-Key-roll-excess-versions/m-p/317181#M227048 Each time you roll a key you get a new key. The short name is a pointer to the latest, but when deleting a key, it refers to all keys prefaced by the name. If the name is in use, there is no way to delete a key version, even though the key version is not in use. If you roll your keys daily, you end up with 364 keys you cannot delete.<BR /> Wed, 26 May 2021 20:51:10 GMT regeamor 2021-05-26T20:51:10Z