Status: IN
DynamoDB on-demand backups are encrypted with the key that was active when the backup was created; changing the table key does not re-encrypt existing backups, and the original key is needed to restore.
Source: entries/2026/03/11/amazondynamodb-latest-developerguide-encryptionhowitworkshtml.md