A Config rule that checks whether Amazon CloudWatch LogGroup retention period is set to specific number of days. The rule is NON_COMPLIANT if the retention period is not set or is less than the configured retention period.

This config rule supports the following parameters:

  • LogGroupNames
    • Required: No
    • Type: CSV
    • Description:A comma-separated list of Log Group names to check the retention period.
  • MinRetentionTime
    • Required: No
    • Type: int
    • Description:Specify the retention time. Valid values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, and 3653. The default retention period is 365 days.
    • Default Value: 365

ConfigRule
AWS::Config::ConfigRule


Source *
CustomPolicyDetails
SourceDetails

CloudFormation Template

Share Template