Patent ID: 11860673
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 13:
14. A non-transitory computer-readable storage medium having stored thereon executable instructions that, in response to being executed by one or more processors of a computing device, cause the computing device to at least:
store, by a plurality of nodes of a distributed database, a replicated version of an encrypted table, the encrypted table accessible using a table encryption key encrypted by a master encryption key, wherein access to the master encryption key is based at least in part on authorization to access the master encryption key granted by a client of the distributed database;
monitor status information associated with the master encryption key, wherein the monitoring comprises a sweeper process examining metadata maintained by the distributed database to identify a plurality of encrypted tables and status information for respective master encryption keys associated with the plurality of encrypted tables maintained by the distributed database, wherein the examination by the sweeper process uses the metadata maintained by the distributed database, wherein the metadata comprises information associated with each of the plurality of encrypted tables and is indicative of a change in a status of the master encryption key;
identify the change in the status of the master encryption key used to generate the table encryption key; and
respond to the change in the status of the master encryption key, wherein the response to the change maintains access to the encrypted table for a threshold period of time after the change in the status of the master encryption key and indicates whether restoration of authorization to access the master encryption key has been granted by the client of the distributed database, wherein the metadata is updated based at least in part on the response.