fix: skip CKV2_AWS_64 on kms key resources

JamesWoolfenden · JamesWoolfenden · commit 560e54e361eb · 2026-05-04T11:18:04.000+01:00
diff --git a/example/examplea/aws_kms_key.code.tf b/example/examplea/aws_kms_key.code.tf
@@ -1,3 +1,4 @@
 resource "aws_kms_key" "code" {
+  # checkov:skip=CKV2_AWS_64: For example only, key policy managed via IAM
   enable_key_rotation = true
 }

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
`1`	`1`	`resource "aws_kms_key" "code" {`
	`2`	`+ # checkov:skip=CKV2_AWS_64: For example only, key policy managed via IAM`
`2`	`3`	`enable_key_rotation = true`
`3`	`4`	`}`