You have a set of Keys defined using the AWS KMS service. You want to stop using a couple of keys but are not sure of which services are currently using the keys. Which of the following would be a safe option to stop using the keys from further usage?

Answer options:

A.Delete the keys since anyway there is a 7 day waiting period before deletion.
B.Disable the keys.
C.Set an alias for the key.
D.Change the key material for the key.

Answer: B
Option A is incorrect because once you schedule the key deletion and the waiting period ends, we cannot enable or use the key again. This would not be a safe option.
Option B is CORRECT because by disabling the key we can stop the usage of the key. Once the key is being disabled, we can also know which particular AWS services use this key.
Option C is incorrect because setting up an alias for the key will not check to see if the keys are currently being used or not.
Option D is incorrect because changing the key material will not check if the keys are currently being used or not.
For more information on deleting keys from KMS, kindly refer to the below URL:
https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html