KMS customer-managed key has automatic rotation enabled

# KMS key with automatic rotation enabled
resource "aws_kms_key" "<example_resource_name>" {
  enable_key_rotation = true  # Critical: enables automatic rotation so the key passes the check
}

# CloudFormation: KMS key with automatic rotation enabled
Resources:
  <example_resource_name>:
    Type: AWS::KMS::Key
    Properties:
      EnableKeyRotation: true  # Critical: enables automatic rotation so the key passes the check
      KeyPolicy:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              AWS: !Sub arn:aws:iam::${AWS::AccountId}:root
            Action: "kms:*"
            Resource: "*"