turbot/terraform_gcp_compliance

GitHub
Loading controls...

Control: Ensure that retention policies on log buckets are configured using Bucket Lock

Description

Enabling retention policies on log buckets will protect logs stored in cloud storage buckets from being overwritten or accidentally deleted. It is recommended to set up retention policies and configure Bucket Lock on all storage buckets that are used as log sinks.

Usage

Run the control in your terminal:

steampipe check terraform_gcp_compliance.control.logging_bucket_retention_policy_enabled

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_gcp_compliance.control.logging_bucket_retention_policy_enabled

SQL

This control uses a named query:

logging_bucket_retention_policy_enabled

Tags