A Config rule that checks if a recovery point expires no earlier than after the specified period. The rule is NON_COMPLIANT if the recovery point has a retention point that is less than the required retention period.

This config rule supports the following parameters:

  • requiredRetentionDays
    • Required: No
    • Type: int
    • Description:Required retention period in days.
    • Default Value: 35

CloudFormation Template

AWSTemplateFormatVersion: '2010-09-09'
Description: Check recovery point minimum retention
Resources:
  ConfigRule:
    Type: 'AWS::Config::ConfigRule'
    Properties:
      ConfigRuleName: undefined
      Description: undefined
      Source:
        Owner: undefined
        SourceIdentifier: undefined
      Scope:
        ComplianceResourceTypes:
          - undefined