Get Involved
Query: KMS CMK rotation should be enabled
Description
Enable key rotation to ensure that keys are rotated once they have reached the end of their crypto period.
Query
Tables used in this query:
Controls using this query:
- 2.8 Ensure rotation for customer created CMKs is enabled
- 3.6 Ensure rotation for customer-created symmetric CMKs is enabled
- 3.6 Ensure rotation for customer-created symmetric CMKs is enabled
- 3.6 Ensure rotation for customer-created symmetric CMKs is enabled
- 3.8 Ensure rotation for customer created CMKs is enabled
- 3.8 Ensure rotation for customer created CMKs is enabled
- 3.8 Ensure rotation for customer created symmetric CMKs is enabled
- 3.8 Ensure rotation for customer created symmetric CMKs is enabled
- KMS CMK rotation should be enabled