Exclude CKV2_AWS_67 to workaround checkov bug (#813)

Works around apparent bug in checkov bridgecrewio/checkov#6294

The KMS key rotation is not configured on the aws_s3_bucket_server_side_encryption_configuration
resource so it does not make sense to check for it there. Key rotation is outside the scope
of this module.

Co-authored-by: Sean Nixon <smnixon@amazon.com>

terraform-modules/cur-setup-destination/main.tf

@@ -12,6 +12,7 @@ resource "aws_s3_bucket" "this" {
 }
 
 resource "aws_s3_bucket_server_side_encryption_configuration" "this" {
+  # checkov:skip=CKV2_AWS_67:KMS Key rotation is not in scope for this module as we do not create the key
   bucket = aws_s3_bucket.this.bucket
   rule {
     apply_server_side_encryption_by_default {

terraform-modules/cur-setup-source/main.tf

@@ -11,6 +11,7 @@ resource "aws_s3_bucket" "this" {
 }
 
 resource "aws_s3_bucket_server_side_encryption_configuration" "this" {
+  # checkov:skip=CKV2_AWS_67:KMS Key rotation is not in scope for this module as we do not create the key
   bucket = aws_s3_bucket.this.bucket
   rule {
     apply_server_side_encryption_by_default {