Control: Check that CMEK rotation policy is in place and is sufficiently short
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.cmek_rotation_one_hundred_daysSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.cmek_rotation_one_hundred_days --shareSQL
This control uses a named query:
kms_key_rotated_within_100_day