Status: IN
For symmetric encryption keys, only the primary version can encrypt data; any enabled version can decrypt, but non-primary enabled versions cannot encrypt.
Source: entries/2026/03/11/kms-key-versions.md
JSON