Skip to content

feat: support key rotation period and bypass safety check - #53

Open
RoseSecurity wants to merge 1 commit into
mainfrom
support-key-rotation-and-bypass-policy-safety-checks
Open

feat: support key rotation period and bypass safety check#53
RoseSecurity wants to merge 1 commit into
mainfrom
support-key-rotation-and-bypass-policy-safety-checks

Conversation

@RoseSecurity

Copy link
Copy Markdown
Member

what

  • Added rotation_period_in_days to allow custom KMS key rotation periods.
  • Added bypass_policy_lockout_safety_check to support KMS policies that require bypassing AWS lockout safety validation.
  • Updated KMS key, alias, and output references to use modern Terraform splat and one() expressions.

why

  • Allows consumers to configure key rotation periods instead of relying only on the AWS default.
  • Supports advanced KMS key policy use cases where Terraform must bypass the policy lockout safety check.
  • Cleans up older Terraform interpolation patterns for clearer Terraform 0.12+ compatible resource and output definitions.

references

Add variables for custom key rotation period and option to bypass the
policy lockout safety check in KMS key resource. Update outputs and
resource definitions to use Terraform 0.12+ idioms.
@RoseSecurity

Copy link
Copy Markdown
Member Author

/terratest

@mergify mergify Bot added the triage Needs triage label May 22, 2026
@mergify mergify Bot removed the triage Needs triage label May 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants