Benchmark: KMS

Usage

Browse dashboards and select KMS:

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check aws_compliance.benchmark.all_controls_kms

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_compliance.benchmark.all_controls_kms

Controls

• KMS CMK policies should prohibit public access
• KMS CMK rotation should be enabled
• KMS key should be in use
• KMS key decryption should be restricted in IAM customer managed policy
• KMS key decryption should be restricted in IAM inline policy
• KMS keys should not be pending deletion

Tags