Enabling key rotation

sysdiglabs · Oct 29, 2024 · 221e5c4 · 221e5c4
1 parent 1f9e336
commit 221e5c4
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/modules/volume_access.cft.yaml b/modules/volume_access.cft.yaml
@@ -233,6 +233,7 @@ Resources:
               Description: "Sysdig Agentless Scanning encryption key"
               PendingWindowInDays: 7
               KeyUsage: ENCRYPT_DECRYPT
+              EnableKeyRotation: true   # Enables automatic yearly rotation
               KeyPolicy:
                 Version: '2012-10-17'
                 Statement:
@@ -446,6 +447,7 @@ Resources:
               Description: "Sysdig Agentless Scanning encryption key"
               PendingWindowInDays: 7
               KeyUsage: ENCRYPT_DECRYPT
+              EnableKeyRotation: true   # Enables automatic yearly rotation
               KeyPolicy:
                 Version: '2012-10-17'
                 Statement: