Encryption  keys are automatically backed up to S3