Specify the expiration duration on a newly rotated key as an ISO 8601 duration. The minimum duration is P28D.
P28D