From 0b704e2ec2229687f0e27eb9ec3313eca342789d Mon Sep 17 00:00:00 2001
From: sergargar <sergargar@users.noreply.github.com>
Date: Fri, 3 Feb 2023 14:50:01 +0100
Subject: [PATCH] fix GetKeyRotationStatus error

---
 prowler/providers/aws/services/kms/kms_service.py | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/prowler/providers/aws/services/kms/kms_service.py b/prowler/providers/aws/services/kms/kms_service.py
index 62899a9378..2d39b47874 100644
--- a/prowler/providers/aws/services/kms/kms_service.py
+++ b/prowler/providers/aws/services/kms/kms_service.py
@@ -68,10 +68,11 @@ class KMS:
         logger.info("KMS - Get Key Rotation Status...")
         for key in self.keys:
             try:
-                regional_client = self.regional_clients[key.region]
-                key.rotation_enabled = regional_client.get_key_rotation_status(
-                    KeyId=key.id
-                )["KeyRotationEnabled"]
+                if "EXTERNAL" not in key.origin:
+                    regional_client = self.regional_clients[key.region]
+                    key.rotation_enabled = regional_client.get_key_rotation_status(
+                        KeyId=key.id
+                    )["KeyRotationEnabled"]
             except Exception as error:
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}:{error.__traceback__.tb_lineno} -- {error}"