{"id":"kms-rotation-does-not-reencrypt-data","text":"Rotating a Cloud KMS key creates a new key version but does not re-encrypt previously encrypted data — re-encryption must be done explicitly.","truth_value":"IN","source":"entries/2026/03/11/kms-key-rotation.md","source_url":"","source_hash":"0ca406d246ac04f0","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"kms-rotation-does-not-reencrypt-data","truth_value":"IN","reason":"premise"}]}}