Query: Backup recovery points manual deletion should be disabled

Description

Checks if a backup vault has an attached resource-based policy which prevents deletion of recovery points. The rule is non-compliant if the Backup Vault does not have resource-based policies or has policies without a suitable 'Deny' statement.

Query

Tables used in this query:

• aws_backup_vault

Controls using this query:

• Backup recovery points manual deletion should be disabled

SQL