File tree Expand file tree Collapse file tree 1 file changed +6
-6
lines changed
compliance/controls/baseline/aws/backup Expand file tree Collapse file tree 1 file changed +6
-6
lines changed Original file line number Diff line number Diff line change 11id : aws_efs_files_have_backup_with_lifecyclepolicy_above_35_days
2- title : EFS Filesystems have Backup Retention > 35 Days
2+ title : Production EFS Filesystem Backups: Minimum Retention of 35 Days
33type : control
44description : Ensure all EFS files are covered by a backup plan with a minimum of Life Cycle Policy 35 days
55integration_type :
@@ -16,12 +16,12 @@ policy:
1616 FROM
1717 aws_backup_recovery_point
1818 WHERE
19- now() - creation_date < '35 days'::interval
20- AND (lifecycle ->> 'DeleteAfterDays')::INT >= 35
19+ -- Use the parameter for the 'days' value
20+ now() - creation_date < '{{.fileSystemRetentionDays}} days'::interval
21+ AND (lifecycle ->> 'DeleteAfterDays')::INT >= {{.fileSystemRetentionDays}}
2122 AND resource_type = 'EFS'
2223 AND status = 'COMPLETED'
2324 )
24-
2525 SELECT
2626 f.arn AS resource,
2727 platform_integration_id AS platform_integration_id,
@@ -31,11 +31,11 @@ policy:
3131 ELSE 'ok'
3232 END AS status,
3333 CASE
34- WHEN p.recovery_point_arn IS NULL THEN 'lacks a backup configuration with a minimum of 35 days'
34+ WHEN p.recovery_point_arn IS NULL THEN 'lacks a backup configuration with a minimum of {{.fileSystemRetentionDays}} days'
3535 ELSE ''
3636 END AS reason,
3737 region,
38- account_id
38+ account_id
3939 FROM
4040 aws_efs_file_system AS f
4141 LEFT JOIN
You can’t perform that action at this time.
0 commit comments