Control: KMS key should be in use
Description
This control checks whether there are any unused CMK (Customer Master Key) KMS (Key Management Service) keys.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.kms_cmk_unusedSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.kms_cmk_unused --shareSQL
This control uses a named query:
kms_cmk_unused