Remediation
From Google Cloud Consoleβ
- Go to
Cryptographic Keys
by visiting: https://console.cloud.google.com/security/kms. - Click on the specific key ring
- From the list of keys, choose the specific key and Click on
Right side pop up the blade (3 dots)
. - Click on
Edit rotation period
. - On the pop-up window,
Select a new rotation period
in days which should be less than 90 and then chooseStarting on
date (date from which the rotation period begins).
From Google Cloud CLIβ
-
Update and schedule rotation by
ROTATION_PERIOD
andNEXT_ROTATION_TIME
for each key:gcloud kms keys update new --keyring=KEY_RING --location=LOCATION --next-rotation-time=NEXT_ROTATION_TIME --rotation-period=ROTATION_PERIOD