After a key is created, it is enabled by default. You can disable a key. A disabled key cannot be used for encryption and decryption.
Operation Steps
Disable
1. Log in to the KMS console;
2. In the navigation bar at the top of the page, select the area where the key is located.
3. In the left navigation bar, click KMS to enter the key list.
4. Locate the key to be disabled and click Disable in the operation column.
5. Click OK in the pop-up dialog box.
Enable
1. Locate the key to be enabled and click Enable in the operation column.
2. Click OK in the pop-up dialog box.