Neglected assets

Disabled AliCloud KMS CMK

Risk Level

Informational (4)

Platform(s)

Description

The KMS CMK (customer master key) {AliCloudKmsKey} is disabled. There is a monthly cost associated with all KMS CMKs regardless of whether they are enabled or disabled. This means that disabled key versions are adding costs to your AliCloud bill while not being of any use. After you delete the CMKs within your Alibaba Cloud account, you are no longer charged. For more information, see https://www.alibabacloud.com/help/en/key-management-service/latest/billing-billing
  • Recommended Mitigation

    Identify and remove any disabled AliCloud CMK (customer master keys).