Status: IN
Once a customer-managed KMS key is associated with a CloudTrail Lake event data store, it cannot be removed or changed.
Source: entries/2026/03/12/awscloudtrail-latest-userguide-cloudtrail-lakehtml.md
JSON