Ensure customer master key (CMK) is not disabled for AWS Key Management Service (KMS)

Using customer managed keys will give administrators control over how data is encrypted to better meet compliance regulations, as well as allow for a more specific key rotation period. Using system-generated keys can sometimes lead to expired or exposed keys remaining in use, leading to insecure data. It is often recommended to use a customer managed key when the service is available.

In AWS Console -

1. Sign in to the AWS Console and open the KMS Console.
2. Under Customer managed keys, choose the key you wish to edit.
3. If the Status shows Disabled, under the Key Actions drop-down, select Enable.

In Terraform -

1. In the aws_kms_key resource, ensure the field is_enabled is true.

References:
https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_key