Control: AWS DocumentDB clusters should have an adequate backup retention period
Description
This control checks whether an AWS DocumentDB cluster has a backup retention period greater than or equal to 7 days. The control fails if the backup retention period is less than 7 days.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.docdb_cluster_backup_retention_period_7_daysSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.docdb_cluster_backup_retention_period_7_days --shareSQL
This control uses a named query:
select arn as resource, case when backup_retention_period >= 7 then 'ok' else 'alarm' end as status, title || ' backup retention period is ' || backup_retention_period || ' day(s).' as reason , region, account_idfrom aws_docdb_cluster;