Ensure KMS Key Has Low Rotation Period
KMS Key is used to create a customer master key (CMK). The number of days to wait before the CMK is deleted. During this period, the CMK is in the PendingDeletion state and the delete operation can be canceled.
Risk Level: high
Platform: Alicloud
Spectral Rule ID: TFALCLD010
REMEDIATION
set a rotation_interval less than '365d' and automatic_rotation to 'Enabled'
- automatic_rotation = "Disabled"
+ automatic_rotation = "Enabled"
- rotation_interval = "366d"
+ rotation_interval = "7d"
Read more:
Updated about 1 year ago