Some companies may require CNAME records/DKIM Keys to be rotated from time to time. On Atlassian's Admin hub (under admin.atlassian.com > Settings > Emails) there's currently no way of triggering the rotation. 

The only workaround would be to remove the domain and re-add it. This process will generate a new domain verification TXT record, but the CNAME records' names and values will remain the same. Please note that this approach would require re-verification of the domain.

Team, can you please consider having a feature implemented so an Org Admin may trigger a renewal of the CNAME/DKIM keys?