Turbot Guardrails Hub 
Hub
Mods
GCP
35
Mods
138
Resource Types
2,012
Policies
917
Controls
118
Quick Actions
83
IAM

Policy: GCP > CIS v2.0 > 1 - Identity and Access Management > 1.10 - Ensure KMS Encryption Keys Are Rotated Within a Period of 90 Days

Configures auditing against a CIS Benchmark item.

Level: 1

Google Cloud Key Management Service stores cryptographic keys in a hierarchical structure designed for useful and elegant access control management.

The format for the rotation schedule depends on the client library that is used. For the gcloud command-line tool, the next rotation time must be in ISO or RFC3339 format, and the rotation period must be in the form INTEGER[UNIT], where units can be one of seconds (s), minutes (m), hours (h) or days (d).

Resource Types

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Policy Specification

Schema Type
string
Default
Per GCP > CIS v2.0 > 1 - Identity and Access Management
Valid Values [YAML]
  • Per GCP > CIS v2.0 > 1 - Identity and Access Management

  • Skip

  • Check: Benchmark

Category

In Your Workspace

Developers