Query: Ensure that retention policies on log buckets are configured using Bucket Lock

Description

Enabling retention policies on log buckets will protect logs stored in cloud storage buckets from being overwritten or accidentally deleted. It is recommended to set up retention policies and configure Bucket Lock on all storage buckets that are used as log sinks.

Query

Tables used in this query:

• terraform_resource

Controls using this query:

• 2.3 Ensure That Retention Policies on Cloud Storage Buckets Used for Exporting Logs Are Configured Using Bucket Lock
• 2.3 Ensure that retention policies on log buckets are configured using Bucket Lock
• 2.3 Ensure that retention policies on log buckets are configured using Bucket Lock
• 2.3 Ensure that retention policies on log buckets are configured using Bucket Lock
• Ensure that retention policies on log buckets are configured using Bucket Lock

SQL