Query: 3.16 Ensure customer created Customer Managed Key (CMK) is rotated at least annually

Description

Oracle Cloud Infrastructure Vault securely stores master encryption keys that protect your your encrypted data. You can use the Vault service to rotate keys to generate new cryptographic material. Periodically rotating keys limits the amount of data encrypted by one key version.

Query

Tables used in this query:

• oci_identity_compartment
• oci_kms_key
• oci_kms_key_version

Controls using this query:

• 3.16 Ensure customer created Customer Managed Key (CMK) is rotated at least annually
• 3.16 Ensure customer created Customer Managed Key (CMK) is rotated at least annually
• 4.16 Ensure customer created Customer Managed Key (CMK) is rotated at least annually

SQL