A CloudWatch Event Rule that triggers on AWS KMS Customer Master Key (CMK) imported material expiration events. (When you import key material into a CMK, you can optionally specify a time at which the key material expires. When the key material expires, AWS KMS deletes the key material and sends a corresponding event to CloudWatch Events).

CloudFormation Template