turbot/aws_compliance

Query: cloudwatch_log_group_retention_period_365

Usage

powerpipe query aws_compliance.query.cloudwatch_log_group_retention_period_365

Steampipe Tables

SQL

select
arn as resource,
case
when retention_in_days is null or retention_in_days < 365 then 'alarm'
else 'ok'
end as status,
case
when retention_in_days is null then title || ' retention period not set.'
when retention_in_days < 365 then title || ' retention period less than 365 days.'
else title || ' retention period 365 days or above.'
end as reason
, region, account_id
from
aws_cloudwatch_log_group;

Controls

The query is being used by the following controls: