diff --git a/cfngoat.yaml b/cfngoat.yaml
index 7e80f9a8..b360356c 100644
--- a/cfngoat.yaml
+++ b/cfngoat.yaml
@@ -259,6 +259,7 @@ Resources:
             AWS: !Sub arn:aws:iam::${AWS::AccountId}:root
           Action: kms:*
           Resource: '*'
+      EnableKeyRotation: True
 
   LogsKeyAlias:
     Type: AWS::KMS::Alias