'Alert when a KMS key is not configured for rotation
This is a AWS CIS Foundations Benchmark audit item (2.8)'

def check_for_kms_key_rotation(self, kms_item):

    rotation_status = kms_item.config.get('KeyRotationEnabled')
    if (not rotation_status):
        self.add_issue(1, 'KMS    key    is    not    configured    for    rotation.', kms_item)
