turbot/aws_compliance
Loading controls...

Control: 10 S3 buckets with versioning enabled should have lifecycle policies configured

Description

This control checks if Amazon Simple Storage Service (Amazon S3) version enabled buckets have lifecycle policy configured. This rule fails if Amazon S3 lifecycle policy is not enabled.

It is recommended to configure lifecycle rules on your Amazon S3 bucket as these rules help you define actions that you want Amazon S3 to take during an object's lifetime.

Remediation

For more information on configuring lifecycle on an Amazon S3 bucket, see Setting lifecycle configuration on a bucketand Managing your storage lifecycle.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_s3_10

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_s3_10 --share

SQL

This control uses a named query:

s3_bucket_versioning_and_lifecycle_policy_enabled

Tags