Is there a way to disable a keypair without revoking? The scenario would be that if it seems will no longer need, at this point like to render it useless but if within say 30 days need access again is there a way to re activate? Where I work we like to have a buffer between deactivating and deleting.
KV v2 is versioned, so you can delete the keypair and then go back to the previous version if you need to recover it.
By default KV v2 keeps a history of the 10 previous updates.
So for a temporary fix until delete would it be best to send a revoke command or just end the lease?
If that’s the only token they can get that would have that policy, sure that works.