[Security] security/kms-key - Comply with CIS 2.8 (widdix#469)

michaelwittig · web-flow · commit e652c7c4ef14 · 2020-08-04T15:54:21.000+02:00
diff --git a/security/kms-key.yaml b/security/kms-key.yaml
@@ -66,6 +66,7 @@ Resources:
     UpdateReplacePolicy: Retain
     Type: 'AWS::KMS::Key'
     Properties:
+      EnableKeyRotation: true
       KeyPolicy:
         Version: '2012-10-17'
         Statement:
