diff --git a/query/kms/kms_cmk_rotation_enabled.sql b/query/kms/kms_cmk_rotation_enabled.sql index e4b06f13..9fb09fd1 100644 --- a/query/kms/kms_cmk_rotation_enabled.sql +++ b/query/kms/kms_cmk_rotation_enabled.sql @@ -3,11 +3,15 @@ select arn as resource, case when origin = 'EXTERNAL' then 'skip' + when key_state = 'PendingDeletion' then 'skip' + when key_state = 'Disabled' then 'skip' when not key_rotation_enabled then 'alarm' else 'ok' end as status, case when origin = 'EXTERNAL' then title || ' has imported key material.' + when key_state = 'PendingDeletion' then title || ' is pending deletion.' + when key_state = 'Disabled' then title || ' is disabled.' when not key_rotation_enabled then title || ' key rotation disabled.' else title || ' key rotation enabled.' end as reason,