s3-last-backup-recovery-point-created - AWS Config

s3-last-backup-recovery-point-created

Checks if a recovery point was created for Amazon Simple Storage Service (Amazon S3). The rule is NON_COMPLIANT if the Amazon S3 bucket does not have a corresponding recovery point created within the specified time period.

Identifier: S3_LAST_BACKUP_RECOVERY_POINT_CREATED

Resource Types: AWS::S3::Bucket

Trigger type: Periodic

AWS Region: All supported AWS regions

Parameters:

resourceTags (Optional)
Type: String

Tags of Amazon S3 bucket for the rule to check, in JSON format {"tagkey" : "tagValue"}.

resourceId (Optional)
Type: String

Name of Amazon S3 bucket for the rule to check.

recoveryPointAgeValue (Optional)
Type: int
Default: 1

Numerical value for maximum allowed age. No more than 744 for hours, 31 for days.

recoveryPointAgeUnit (Optional)
Type: String
Default: days

Unit of time for maximum allowed age. Accepted values: 'hours', 'days'.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.