title: How frequently should I rotate my encryption keys? Can I use Cloud KMS to automatically rotate keys?
body: <p>With my on-prem KMS, I rotate keys monthly. Can I also do that with Cloud KMS? Is there a better recommended frequency compared to my on-prem use? Is data re-encrypted when I rotate a key?</p>