Thanks! If you are relying on developers to rotate their keys, perhaps you also need a centralized periodic check (lambda function perhaps) that verifies that keys are being rotated. I.e., verify that no one is using a key older than N days.