making sure agentless scanning kms key uses rotation (#22)

sysdiglabs · Oct 30, 2024 · 1900a66 · 1900a66
1 parent 5fb8dd5
commit 1900a66
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/modules/agentless-scanning/main.tf b/modules/agentless-scanning/main.tf
@@ -417,6 +417,7 @@ Resources:
         Description: "Sysdig Agentless Scanning encryption key"
         PendingWindowInDays: ${var.kms_key_deletion_window}
         KeyUsage: "ENCRYPT_DECRYPT"
+        EnableKeyRotation: true   # Enables automatic yearly rotation
         KeyPolicy:
           Id: ${local.scanning_resource_name}
           Statement:

diff --git a/modules/agentless-scanning/organizational.tf b/modules/agentless-scanning/organizational.tf
@@ -181,6 +181,7 @@ Resources:
         Description: "Sysdig Agentless Scanning encryption key"
         PendingWindowInDays: ${var.kms_key_deletion_window}
         KeyUsage: "ENCRYPT_DECRYPT"
+        EnableKeyRotation: true   # Enables automatic yearly rotation
         KeyPolicy:
           Id: ${local.scanning_resource_name}
           Statement: