Loading controls...
Benchmark: Cryptographic Key Establishment And Management (SC-12)
Description
The organization establishes and manages cryptographic keys for required cryptography employed within the information system in accordance with [Assignment: organization-defined requirements for key generation, distribution, storage, access, and destruction].
Usage
Browse dashboards and select Cryptographic Key Establishment And Management (SC-12):
steampipe dashboardOr run the benchmarks in your terminal:
steampipe check aws_compliance.benchmark.fedramp_low_rev_4_sc_12Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share aws_compliance.benchmark.fedramp_low_rev_4_sc_12Controls
- ACM certificates should be set to expire within 30 days
- KMS CMK rotation should be enabled
- KMS keys should not be pending deletion