diff --git a/en/aws/kms/kms-key-rotation.md b/en/aws/kms/kms-key-rotation.md index 00023f148..95ba60b9e 100644 --- a/en/aws/kms/kms-key-rotation.md +++ b/en/aws/kms/kms-key-rotation.md @@ -15,12 +15,12 @@ | **Recommended Action** | Enable yearly rotation for the KMS key | ## Detailed Remediation Steps -1. Log into the AWS Management Console. +1. Log in to the AWS Management Console. 2. Select the "Services" option and search for KMS.
3. Scroll down the left navigation panel and choose "Customer Managed Keys" under "Key Management Service".
4. Select the key that needs to be verified by clicking on the alias of the key under "Alias".
-5. Scroll down the "Customer managed keys" page and click on the "Key rotation" and check the "Automatically rotate this CMK every year" status. If it's not checked then the selected "KMS key" is not set to rotate on a regular schedule.
-6. Repeat steps number 2 - 5 to verify other "KMS keys" in the selected AWS region.
-7. Navigate to "Customer Managed Keys" under "Key Management Service" and select the "KMS key" that needs to modify to enable yearly rotation for the KMS key.
-8. Scroll down the "Customer managed keys" page and click on the "Key rotation" tab. Enable "Automatically rotate this CMK every year" checkbox and click on the "Save" button to make the necessary changes.
-9. Repeat steps number 7 - 8 to enable yearly rotation for the "KMS key".
+5. Scroll down the "Customer managed keys" page and click on the "Key rotation" and check the "Automatically rotate this KMS key every year" status. If it's not checked then the selected "KMS key" is not set to rotate on a regular schedule.
+6. Repeat step number 2 - 5 to verify other "KMS keys" in the selected AWS region.
+7. Navigate to "Customer Managed Keys" under "Key Management Service" and select the "KMS key" that needs to be modified to enable yearly rotation for the KMS key.
+8. Scroll down the "Customer managed keys" page and click on the "Key rotation" tab. Enable "Automatically rotate this KMS key every year" checkbox and click on the "Save" button to make the necessary changes.
+9. Repeat step number 7 - 8 to enable yearly rotation for all the remaining "KMS key".
diff --git a/resources/aws/kms/.DS_Store b/resources/aws/kms/.DS_Store new file mode 100644 index 000000000..a0f236c5e Binary files /dev/null and b/resources/aws/kms/.DS_Store differ diff --git a/resources/aws/kms/kms-key-rotation/step2.png b/resources/aws/kms/kms-key-rotation/step2.png index a99e4a368..d2cb78539 100644 Binary files a/resources/aws/kms/kms-key-rotation/step2.png and b/resources/aws/kms/kms-key-rotation/step2.png differ diff --git a/resources/aws/kms/kms-key-rotation/step3.png b/resources/aws/kms/kms-key-rotation/step3.png index 91eae39b3..ae1286ab7 100644 Binary files a/resources/aws/kms/kms-key-rotation/step3.png and b/resources/aws/kms/kms-key-rotation/step3.png differ diff --git a/resources/aws/kms/kms-key-rotation/step4.png b/resources/aws/kms/kms-key-rotation/step4.png index 351448a1e..ead6d18d4 100644 Binary files a/resources/aws/kms/kms-key-rotation/step4.png and b/resources/aws/kms/kms-key-rotation/step4.png differ diff --git a/resources/aws/kms/kms-key-rotation/step5.png b/resources/aws/kms/kms-key-rotation/step5.png index 24fe4a6fd..71cfdb242 100644 Binary files a/resources/aws/kms/kms-key-rotation/step5.png and b/resources/aws/kms/kms-key-rotation/step5.png differ diff --git a/resources/aws/kms/kms-key-rotation/step7.png b/resources/aws/kms/kms-key-rotation/step7.png index 5c8deaad6..ead6d18d4 100644 Binary files a/resources/aws/kms/kms-key-rotation/step7.png and b/resources/aws/kms/kms-key-rotation/step7.png differ diff --git a/resources/aws/kms/kms-key-rotation/step8.png b/resources/aws/kms/kms-key-rotation/step8.png index ffa7cd749..16f7e6efa 100644 Binary files a/resources/aws/kms/kms-key-rotation/step8.png and b/resources/aws/kms/kms-key-rotation/step8.png differ