AWS KMS密钥删除失败，因未等待待删除期结束

解决方案

1. Schedule key deletion and wait for the waiting period. In AWS CLI:
   
   aws kms schedule-key-deletion --key-id 1234abcd-12ab-34cd-56ef-1234567890ab --pending-window-in-days 7
   
   Then wait 7 days before the key is actually deleted. To cancel deletion, use:
   
   aws kms cancel-key-deletion --key-id 1234abcd-12ab-34cd-56ef-1234567890ab

2. Use Terraform to manage key lifecycle with a 'deletion_window_in_days' parameter:
   
   resource "aws_kms_key" "my_key" {
     description             = "Example KMS key"
     deletion_window_in_days = 7
   }
   
   Terraform will schedule deletion and wait, but you must ensure the resource is destroyed after the window.

3. If immediate deletion is required, create a new key and rotate usage to it, then schedule the old key for deletion. This avoids downtime while waiting for the deletion period.