Checks Performed
- App-tier KMS Key Should Be In Use
- Database-tier KMS Key Should Be In Use
- Existence Of Specific AWS KMS CMKs
- KMS Customer Master Key Should Be In Use
- KMS Key Policies Should Be Designed To Limit Number Of KMS Admins
- KMS Key Rotation Should Be Enabled
- KMS Keys Scheduled For Deletion Should Be Recovered
- KMS Keys Should Not Allow Unknown Cross Account Access
- KMS Keys Should Not Be Exposed
- Secret Manager Secrets Rotation Enabled
- Secret Manager Secrets Should Be Encrypted With CMKs
- Secret Manager Should Be Encrypted By Default
- Secrets Manager Secrets Should Be Rotated Frequently
- Secrets Manager Should Be In Use
- Unused Customer Master Key Should Be Removed
- Web-tier KMS Key Should Be In Use