My Saved Presets
You must be logged in to view saved presets

Loading Library ...

CloudWatch Log Group Retention Configured

A Config rule that checks whether Amazon CloudWatch LogGroup retention period is set to specific number of days. The rule is NON_COMPLIANT if the retention period is not set or is less than the configured retention period.

This config rule supports the following parameters:

  • LogGroupNames
    • Required: No
    • Type: CSV
    • Description:A comma-separated list of Log Group names to check the retention period.
  • MinRetentionTime
    • Required: No
    • Type: int
    • Description:Specify the retention time. Valid values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, and 3653. The default retention period is 365 days.
    • Default Value: 365

ConfigRule

AWS::Config::ConfigRule

Scope

ComplianceResourceTypes

Source
CustomPolicyDetails

SourceDetails

CloudFormation Template

© 2024 asecurecloud. All rights reserved.