Control: Ensure that retention policies on log buckets are configured using Bucket Lock
Description
Enabling retention policies on log buckets will protect logs stored in cloud storage buckets from being overwritten or accidentally deleted. It is recommended to set up retention policies and configure Bucket Lock on all storage buckets that are used as log sinks.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.logging_bucket_retention_policy_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.logging_bucket_retention_policy_enabled --shareSQL
This control uses a named query:
logging_bucket_retention_policy_enabled