Encryption Key Aggregate
Consistency boundary for a managed encryption key, including key metadata, rotation schedule, and usage policy.
Data Aggregate Application active
Encryption Key Aggregate tracks key versions, rotation history, and associated usage policies. Key material is never exposed outside Vault; only ciphertext operations are permitted via the transit API. Automated rotation is triggered 30 days before the configured expiry.
Relationships
Composes outgoing 1
Owns outgoing 2
Owned by incoming 1
Architecture Context
Diagrams
Not yet referenced in any diagram
Properties
Type Data Aggregate
Layer Application
Domain Security and Compliance
Status active
Owner Security Team
Additional Metadata
Lifecycle States active, rotating, retired, destroyed
Archimate Type data-object
Ddd Type Aggregate
Togaf Type Logical Data Component
Meta Model
Business
Organization
Application current
Technology