Operating it

A provider is operated, not installed once: keys rotate, data keys are rewrapped, migrations run, backups are taken and restored. Each of those has a command, and each command says what it did.

This page will describe the routine operations, and the two that are not routine: a compromised key, and a restore.