In an embodiment, systems and methods for rotating keys is provided. A key rotation process is performed on a cloud-based computing platform either on a scheduled basis or on request of a user or administrator. As part of the key rotation process, key pairs associated with cloud resources are identified. Of the identified key pairs, keys that are not currently being used in a key vault are identified and rotated. For identified key pairs where both keys are currently being used, an instruction is sent to the associated resources to switch to a second key of the key pair. The first key will then be rotated the next time the rotation process is executed.