Ensure KMS Key Has Low Rotation Period

KMS Key is used to create a customer master key (CMK). The number of days to wait before the CMK is deleted. During this period, the CMK is in the PendingDeletion state and the delete operation can be canceled.

Risk Level: high
Platform: Alicloud
Spectral Rule ID: TFALCLD010

REMEDIATION

set a rotation_interval less than '365d' and automatic_rotation to 'Enabled'

- automatic_rotation      = "Disabled"
+ automatic_rotation      = "Enabled"

- rotation_interval       = "366d"
+ rotation_interval       = "7d"

Read more: