diff --git a/prowler/providers/aws/services/kms/kms_service.py b/prowler/providers/aws/services/kms/kms_service.py index 62899a9378..2d39b47874 100644 --- a/prowler/providers/aws/services/kms/kms_service.py +++ b/prowler/providers/aws/services/kms/kms_service.py @@ -68,10 +68,11 @@ class KMS: logger.info("KMS - Get Key Rotation Status...") for key in self.keys: try: - regional_client = self.regional_clients[key.region] - key.rotation_enabled = regional_client.get_key_rotation_status( - KeyId=key.id - )["KeyRotationEnabled"] + if "EXTERNAL" not in key.origin: + regional_client = self.regional_clients[key.region] + key.rotation_enabled = regional_client.get_key_rotation_status( + KeyId=key.id + )["KeyRotationEnabled"] except Exception as error: logger.error( f"{regional_client.region} -- {error.__class__.__name__}:{error.__traceback__.tb_lineno} -- {error}"