After a key is disabled in the cloud and cannot be used by any applications, you can set the date for permanent key deletion.

To delete a CloudKey

1. Log in to the Vault web GUI using an account with Cloud Admin privileges.
2. In the top menu bar, click CloudKeys.

3. Click the CloudKeys tab.

4. Select the key set for the CloudKey that you want to delete. For Azure, you must also select the Type.

5. Select the CloudKey that you want to delete.

6. Click Actions > Delete CloudKey.

7. On the confirmation screen, enter the number of days when the CloudKey will be permanently deleted.

   • The maximum number of days is 30 for AWS, 90 for Azure, and 120 for GCP.

   • The minimum is 7 days or, on Azure, if Purge Protection is enabled.

8. Click Delete. 

   You can cancel the deletion at any time before the CloudKey is permanently deleted.