Query: KMS keys should not be pending deletion

Description

To help protect data at rest, ensure necessary customer master keys (CMKs) are not scheduled for deletion in AWS Key Management Service (AWS KMS).

Query

Tables used in this query:

• aws_kms_key

Controls using this query:

• 3 AWS KMS keys should not be unintentionally deleted
• KMS keys should not be pending deletion

SQL