All checks

Medium KMS · regional

AWS KMS key rotation should be enabled

Verifies that AWS KMS keys have automatic key rotation enabled.

service: KMS
severity: Medium
scope: evaluated in every region

How to fix it

To remediate KMS keys without rotation enabled, you need to enable rotation for each key.

Open the AWS KMS console.
Go to the 'Customer managed keys' section.
Select the KMS key.
Under 'Key rotation', select 'Enable' to activate key rotation.

See which of your accounts this check is failing on.

Book a demo