Status: IN
DynamoDB allows switching between encryption key types (AWS owned, AWS managed, customer managed) at any time on an existing table without downtime or code changes.
Source: entries/2026/03/11/amazondynamodb-latest-developerguide-EncryptionAtResthtml.md