A backup snapshot restores while the copy role still lacks the right to re-encrypt in the target account during a failover rehearsal

Disaster recovery looks viable until the protected copy has to become live elsewhere. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.