github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/google/kms/AVD-GCP-0065/Terraform.md (about) 1 2 Set key rotation period to 90 days 3 4 ```hcl 5 resource "google_kms_key_ring" "keyring" { 6 name = "keyring-example" 7 location = "global" 8 } 9 10 resource "google_kms_crypto_key" "example-key" { 11 name = "crypto-key-example" 12 key_ring = google_kms_key_ring.keyring.id 13 rotation_period = "7776000s" 14 15 lifecycle { 16 prevent_destroy = true 17 } 18 } 19 20 ``` 21 22 #### Remediation Links 23 - https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/kms_crypto_key#rotation_period 24