eli-285 enable kms key rotation

eddalmond1 · eddalmond1 · commit 4e18992efe95 · 2025-08-05T17:13:20.000+01:00
diff --git a/infrastructure/stacks/api-layer/cloudwatch_alarms.tf b/infrastructure/stacks/api-layer/cloudwatch_alarms.tf
@@ -311,6 +311,8 @@ resource "aws_sns_topic" "cloudwatch_alarms" {
 resource "aws_kms_key" "sns_encryption_key" {
   description             = "KMS key for encrypting CloudWatch alarms SNS topic"
   deletion_window_in_days = 7
+  enable_key_rotation     = true
+
 
   tags = {
     Name        = "cloudwatch-alarms-sns-encryption-key"
