github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/google/kms/AVD-GCP-0065/Terraform.md (about)

     1  
     2  Set key rotation period to 90 days
     3  
     4  ```hcl
     5   resource "google_kms_key_ring" "keyring" {
     6     name     = "keyring-example"
     7     location = "global"
     8   }
     9   
    10   resource "google_kms_crypto_key" "example-key" {
    11     name            = "crypto-key-example"
    12     key_ring        = google_kms_key_ring.keyring.id
    13     rotation_period = "7776000s"
    14   
    15     lifecycle {
    16       prevent_destroy = true
    17     }
    18   }
    19   
    20  ```
    21  
    22  #### Remediation Links
    23   - https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/kms_crypto_key#rotation_period
    24