MEDIUM
Source
CloudSploit
ID
vm-disk-cmk-rotation

VM Disk CMK Rotation

Ensures that customer-managed keys (CMK) are automatically rotated for virtual machine disks.

Automatic key rotation helps ensure your keys are secure. A disk references a key via its disk encryption set. When you enable automatic rotation for a disk encryption set, the system will automatically update all managed disks, snapshots, and images referencing the disk encryption set to use the new version of the key within one hour.

Enable automatic key rotation for all VM disk encryption sets.