Control: 10 S3 buckets with versioning enabled should have lifecycle policies configured
Description
This control checks if Amazon Simple Storage Service (Amazon S3) version enabled buckets have lifecycle policy configured. This rule fails if Amazon S3 lifecycle policy is not enabled.
It is recommended to configure lifecycle rules on your Amazon S3 bucket as these rules help you define actions that you want Amazon S3 to take during an object's lifetime.
Remediation
For more information on configuring lifecycle on an Amazon S3 bucket, see Setting lifecycle configuration on a bucketand Managing your storage lifecycle.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_s3_10Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_s3_10 --shareSQL
This control uses a named query:
s3_bucket_versioning_and_lifecycle_policy_enabled