Status Approved. Reviewer: Diego Ortega.
Yes — Bring Your Own Key (BYOK) via AWS KMS Customer-Managed CMKs available on Enterprise tier. Key disabling or deletion in your AWS account renders the corresponding customer data permanently inaccessible (cryptographic shredding).
Yes — Bring Your Own Key (BYOK) via AWS KMS Customer-Managed CMKs available on Enterprise tier. Key disabling or deletion in your AWS account renders the corresponding customer data permanently inaccessible (cryptographic shredding).
Rationale: AI-matched against LIB-SEC-012; reviewed verbatim.
Verified against trust portal documentation; no changes.