[Snyk] KMS key does not have key rotation enabled

[nickumia-reisys]

Date of report: 12/06/2022
Severity: Low

• KMS key does not have key rotation enabled (Low)
  • Detailed paths
    • Path: terraform/ecs/provision/dns.tf
    • Introduced through: resource › aws_sns_topic[solr_memory_updates] › kms_master_key_id
  • This issue is...
    • That your encryption keys are not being rotated by AWS
  • The impact of this is...
    • That data is being encrypted with a key which is valid for a longer period of time, resulting in a greater exposure window should that key be leaked
  • You can resolve it by...
    • Set enable_key_rotation attribute to true
• KMS key does not have key rotation enabled (Low)
  • Detailed paths
    • Path: terraform/ecs/provision/efs-leader.tf
    • Introduced through: input › resource › aws_kms_key[solr-data-key] › enable_key_rotation
  • This issue is...
    • That your encryption keys are not being rotated by AWS
  • The impact of this is...
    • That data is being encrypted with a key which is valid for a longer period of time, resulting in a greater exposure window should that key be leaked
  • You can resolve it by...
    • Set enable_key_rotation attribute to true
• KMS key does not have key rotation enabled (Low)
  • Detailed paths
    • Path: terraform/ecs/provision/logging.tf
    • Introduced through: input › resource › aws_kms_key[ecs-log-key] › enable_key_rotation
  • This issue is...
    • That your encryption keys are not being rotated by AWS
  • The impact of this is...
    • That data is being encrypted with a key which is valid for a longer period of time, resulting in a greater exposure window should that key be leaked
  • You can resolve it by...
    • Set enable_key_rotation attribute to true