search

awslabs / aws-config-rules

[Node, Python, Java] Repository of sample Custom Rules for AWS Config.
http://aws.amazon.com/config/
Creative Commons Zero v1.0 Universal
1.6k stars 854 forks source link

KMS CMKs are not scheduled for deletion #294

Closed 0xjjoyy closed 5 years ago

0xjjoyy commented 5 years ago

Hello,

The existing rule requires the list of key ids to be passed as a parameter.

Please provide an option to scan ALL CMKs.

This rule is difficult to deploy in practice as part of CloudFormation automation. Whenever a new CMK is added to CloudFormation, first the CMK must be created then this rule is updated and rerun adding the new keyid.

Thanks