s3-last-backup-recovery-point-created - AWS Config

s3-last-backup-recovery-point-created

Checks if a recovery point was created for Amazon Simple Storage Service (Amazon S3). The rule is NON_COMPLIANT if the Amazon S3 bucket does not have a corresponding recovery point created within the specified time period.

Identifier: S3_LAST_BACKUP_RECOVERY_POINT_CREATED

Resource Types: AWS::S3::Bucket

Trigger type: Periodic

AWS Region: All supported AWS regions except China (Beijing), Asia Pacific (Jakarta), Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Osaka), Asia Pacific (Melbourne), Israel (Tel Aviv), Europe (Spain), China (Ningxia), Europe (Zurich) Region

Parameters:

resourceTags (Optional)
Type: String

Tags of Amazon S3 bucket for the rule to check, in JSON format {"tagkey" : "tagValue"}.

resourceId (Optional)
Type: String

Name of Amazon S3 bucket for the rule to check.

recoveryPointAgeValue (Optional)
Type: int
Default: 1

Numerical value for maximum allowed age. No more than 744 for hours, 31 for days.

recoveryPointAgeUnit (Optional)
Type: String
Default: days

Unit of time for maximum allowed age. Accepted values: 'hours', 'days'.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.