aws.kms

Supported Platform

• aws

Description

AWS KMS for key management

The aws.kms resource can be used to assess the configuration of AWS KMS keys.

Fields

ID	TYPE	DESCRIPTION
keys	[]aws.kms.key	a list of all customer master keys (CMKs) in the caller's AWS account (across all regions)

Examples

Ensure rotation for customer created CMKs is enabled

aws.kms.keys
  .where(metadata["KeyState"] == "Enabled")
  .all(keyRotationEnabled == true);