pmh_only/bp-check
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add feature : KMS bp check

Browse Source
This commit is contained in:
Juwon 2024-08-07 20:55:23 +09:00 committed by skyuecx0630
parent 24c13eff59
commit a06dce562f
1 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
services/kms.py
View File

@ -2,10 +2,24 @@ from models import RuleCheckResult
import boto3 import boto3
# client = boto3.client("") client = boto3.client("kms")
def cmk_backing_key_rotation_enabled(): def cmk_backing_key_rotation_enabled():
compliant_resources = []
non_compliant_resources = []
keys = client.list_keys()["Keys"]
for key in keys:
response = client.get_key_rotation_status(KeyId=key["KeyId"])
if response["KeyRotationEnabled"] == True:
compliant_resources.append(response["KeyId"])
else:
non_compliant_resources.append(response["KeyId"])
return RuleCheckResult( return RuleCheckResult(
passed=False, compliant_resources=[], non_compliant_resources=[] passed=not non_compliant_resources,
compliant_resources=compliant_resources,
non_compliant_resources=non_compliant_resources,
) )