Skip to content

Commit f2421e6

Browse files
authored
Update aws_efs_files_have_backup_with_lifecyclepolicy_above_35_days.yaml
1 parent 2ce27b8 commit f2421e6

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

compliance/controls/baseline/aws/backup/aws_efs_files_have_backup_with_lifecyclepolicy_above_35_days.yaml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
id: aws_efs_files_have_backup_with_lifecyclepolicy_above_35_days
2-
title: EFS Filesystems have Backup Retention > 35 Days
2+
title: Production EFS Filesystem Backups: Minimum Retention of 35 Days
33
type: control
44
description: Ensure all EFS files are covered by a backup plan with a minimum of Life Cycle Policy 35 days
55
integration_type:
@@ -16,12 +16,12 @@ policy:
1616
FROM
1717
aws_backup_recovery_point
1818
WHERE
19-
now() - creation_date < '35 days'::interval
20-
AND (lifecycle ->> 'DeleteAfterDays')::INT >= 35
19+
-- Use the parameter for the 'days' value
20+
now() - creation_date < '{{.fileSystemRetentionDays}} days'::interval
21+
AND (lifecycle ->> 'DeleteAfterDays')::INT >= {{.fileSystemRetentionDays}}
2122
AND resource_type = 'EFS'
2223
AND status = 'COMPLETED'
2324
)
24-
2525
SELECT
2626
f.arn AS resource,
2727
platform_integration_id AS platform_integration_id,
@@ -31,11 +31,11 @@ policy:
3131
ELSE 'ok'
3232
END AS status,
3333
CASE
34-
WHEN p.recovery_point_arn IS NULL THEN 'lacks a backup configuration with a minimum of 35 days'
34+
WHEN p.recovery_point_arn IS NULL THEN 'lacks a backup configuration with a minimum of {{.fileSystemRetentionDays}} days'
3535
ELSE ''
3636
END AS reason,
3737
region,
38-
account_id
38+
account_id
3939
FROM
4040
aws_efs_file_system AS f
4141
LEFT JOIN

0 commit comments

Comments
 (0)