Ensure Alicloud KMS Possess Usable Customer Master Keys (CMK)
KMS allows you to configure custom rotation policies to automatically rotate encryption keys periodically and therefore enhance the security of keys. requests, or both.
Risk Level: medium
Platform: Alicloud
Spectral Rule ID: TFALCLD005
REMEDIATION
set is_enabled
to 'true'
request_config {
- is_enabled = false
+ is_enabled = true
}
Read more:
Updated about 1 year ago