github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/google/kms/AVD-GCP-0065/Terraform.md (about)

     1  
     2  Set key rotation period to 90 days
     3  
     4  ```hcl
     5   resource "google_kms_key_ring" "keyring" {
     6     name     = "keyring-example"
     7     location = "global"
     8   }
     9   
    10   resource "google_kms_crypto_key" "example-key" {
    11     name            = "crypto-key-example"
    12     key_ring        = google_kms_key_ring.keyring.id
    13     rotation_period = "7776000s"
    14   
    15     lifecycle {
    16       prevent_destroy = true
    17     }
    18   }
    19   
    20  ```
    21  
    22  #### Remediation Links
    23   - https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/kms_crypto_key#rotation_period
    24