From 221e5c4da874540781e20489bb83f8c4b33aa6b3 Mon Sep 17 00:00:00 2001
From: Miguel Pais <miguel.pais@sysdig.com>
Date: Tue, 29 Oct 2024 15:51:00 +0100
Subject: [PATCH] Enabling key rotation

---
 modules/volume_access.cft.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/volume_access.cft.yaml b/modules/volume_access.cft.yaml
index b1c6748..d21204e 100644
--- a/modules/volume_access.cft.yaml
+++ b/modules/volume_access.cft.yaml
@@ -233,6 +233,7 @@ Resources:
               Description: "Sysdig Agentless Scanning encryption key"
               PendingWindowInDays: 7
               KeyUsage: ENCRYPT_DECRYPT
+              EnableKeyRotation: true   # Enables automatic yearly rotation
               KeyPolicy:
                 Version: '2012-10-17'
                 Statement:
@@ -446,6 +447,7 @@ Resources:
               Description: "Sysdig Agentless Scanning encryption key"
               PendingWindowInDays: 7
               KeyUsage: ENCRYPT_DECRYPT
+              EnableKeyRotation: true   # Enables automatic yearly rotation
               KeyPolicy:
                 Version: '2012-10-17'
                 Statement: