Skip to main content

aws.kms

Supported Platform

  • aws

Description

AWS KMS for key management

The aws.kms resource can be used to assess the configuration of AWS KMS keys.

Fields

IDTYPEDESCRIPTION
keys[]aws.kms.keya list of all customer master keys (CMKs) in the caller's AWS account (across all regions)

Examples

Ensure rotation for customer created CMKs is enabled

aws.kms.keys
.where(metadata["KeyState"] == "Enabled")
.all(keyRotationEnabled == true);