Enabling key rotation (#135)

miguelpais · web-flow · commit d344336ecc15 · 2024-10-30T09:11:38.000+01:00
diff --git a/modules/volume_access.cft.yaml b/modules/volume_access.cft.yaml
@@ -233,6 +233,7 @@ Resources:
               Description: "Sysdig Agentless Scanning encryption key"
               PendingWindowInDays: 7
               KeyUsage: ENCRYPT_DECRYPT
+              EnableKeyRotation: true   # Enables automatic yearly rotation
               KeyPolicy:
                 Version: '2012-10-17'
                 Statement:
@@ -446,6 +447,7 @@ Resources:
               Description: "Sysdig Agentless Scanning encryption key"
               PendingWindowInDays: 7
               KeyUsage: ENCRYPT_DECRYPT
+              EnableKeyRotation: true   # Enables automatic yearly rotation
               KeyPolicy:
                 Version: '2012-10-17'
                 Statement:
