API key rotation for AI providers only stays downtime-free when you treat it as a two-key window: point every client at one key, regenerate the idle second key, migrate clients across to it, then repeat for the first. AWS allows a maximum of two access keys per IAM user, and …