terraform-google-modules/terraform-google-bootstrap

SCC SHA yields "KMS_KEY_NOT_ROTATED" on tf-key resource

Jberlinsky opened this issue · 5 comments

No rotation period is set on the tf-key resource, which triggers a SCC finding KMS_KEY_NOT_ROTATED. Suggest allowing a retention period to be set (or a best-practice default provided).

This makes sense, would be happy to accept a PR if you have the time?

@bharathkkb FYI

I filed the issue as a reminder-to-self to submit a PR when I have a moment :)

Great thanks @Jberlinsky

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days

Opening to track removal of KMS resources

for #142 breaking release