Skip to content

Commit

Permalink
Patch 451 (#473)
Browse files Browse the repository at this point in the history
* Update kms-key-rotation.md

* Update kms-key-rotation.md

* Images updated for all steps

* Apply suggestions from code review

Co-authored-by: alphadev4 <[email protected]>
  • Loading branch information
shuklaalok87 and alphadev4 authored Oct 27, 2022
1 parent 80abdab commit 128e0a6
Show file tree
Hide file tree
Showing 8 changed files with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions en/aws/kms/kms-key-rotation.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,12 +15,12 @@
| **Recommended Action** | Enable yearly rotation for the KMS key |

## Detailed Remediation Steps
1. Log into the AWS Management Console.
1. Log in to the AWS Management Console.
2. Select the "Services" option and search for KMS. </br> <img src="/resources/aws/kms/kms-key-rotation/step2.png"/>
3. Scroll down the left navigation panel and choose "Customer Managed Keys" under "Key Management Service".</br> <img src="/resources/aws/kms/kms-key-rotation/step3.png"/>
4. Select the key that needs to be verified by clicking on the alias of the key under "Alias".</br> <img src="/resources/aws/kms/kms-key-rotation/step4.png"/>
5. Scroll down the "Customer managed keys" page and click on the "Key rotation" and check the "Automatically rotate this CMK every year" status. If it's not checked then the selected "KMS key" is not set to rotate on a regular schedule.</br> <img src="/resources/aws/kms/kms-key-rotation/step5.png"/>
6. Repeat steps number 2 - 5 to verify other "KMS keys" in the selected AWS region.</br>
7. Navigate to "Customer Managed Keys" under "Key Management Service" and select the "KMS key" that needs to modify to enable yearly rotation for the KMS key.</br> <img src="/resources/aws/kms/kms-key-rotation/step7.png"/>
8. Scroll down the "Customer managed keys" page and click on the "Key rotation" tab. Enable "Automatically rotate this CMK every year" checkbox and click on the "Save" button to make the necessary changes.</br> <img src="/resources/aws/kms/kms-key-rotation/step8.png"/>
9. Repeat steps number 7 - 8 to enable yearly rotation for the "KMS key".</br>
5. Scroll down the "Customer managed keys" page and click on the "Key rotation" and check the "Automatically rotate this KMS key every year" status. If it's not checked then the selected "KMS key" is not set to rotate on a regular schedule.</br> <img src="/resources/aws/kms/kms-key-rotation/step5.png"/>
6. Repeat step number 2 - 5 to verify other "KMS keys" in the selected AWS region.</br>
7. Navigate to "Customer Managed Keys" under "Key Management Service" and select the "KMS key" that needs to be modified to enable yearly rotation for the KMS key.</br> <img src="/resources/aws/kms/kms-key-rotation/step7.png"/>
8. Scroll down the "Customer managed keys" page and click on the "Key rotation" tab. Enable "Automatically rotate this KMS key every year" checkbox and click on the "Save" button to make the necessary changes.</br> <img src="/resources/aws/kms/kms-key-rotation/step8.png"/>
9. Repeat step number 7 - 8 to enable yearly rotation for all the remaining "KMS key".</br>
Binary file added resources/aws/kms/.DS_Store
Binary file not shown.
Binary file modified resources/aws/kms/kms-key-rotation/step2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/kms/kms-key-rotation/step3.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/kms/kms-key-rotation/step4.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/kms/kms-key-rotation/step5.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/kms/kms-key-rotation/step7.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/kms/kms-key-rotation/step8.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 128e0a6

Please sign in to comment.