AWS Config Rule: Backup Recovery Point Minimum Retention Check

BACKUP_RECOVERY_POINT_MINIMUM_RETENTION_CHECK

Ryan Ware

Last Update 8 tháng trước

Description: Checks if a recovery point expires no earlier than after the specified period. The rule is NON_COMPLIANT if the recovery point has a retention point that is less than the required retention period.


Trigger type: Configuration changes


AWS Region: All supported AWS regions except China (Beijing), Africa (Cape Town), Asia Pacific (Osaka), Europe (Milan), AWS GovCloud (US-East), AWS GovCloud (US-West), US West (Oregon), and China (Ningxia) Region


How to Resolve Manually

By default, the requiredRetentionDays is configured for 35 days, which would mean that if your Recovery Points inside your AWS Backup Vaults have a Retention Period of less than 35 days, the rule would flag as NON_COMPLIANT.


To raise your Retention Point above the value of your requiredRetentionDays, you will need to locate your Backup Plan creating the backups within your AWS Backup.


Head to your AWS Backup Dashboard and head to the subheading Backup Plans. From here, select your Backup Plan and view the Summary. You can click edit to change your Retention Period similar to the image below.


Want to know more about StackZone and how to make your cloud management simple and secure?

Check our how it works section with easy to follow videos or just create your own StackZone Account here

Was this article helpful?

0 out of 0 liked this article

Still need help? Message Us