Terminated key record state
The terminated state adds a second step or safety step for deleting a deprecated state key record. A terminated key record can be moved to the deprecated state and ultimately made active again as needed. A terminated key record can also be deleted from the KMS.
Caution:
Before deleting a key, make sure that no valid image exists which was encrypted with this key
Key records in the terminated state can either stay terminated, be made deprecated, or physically deleted.