DynamoDB tables should have point-in-time recovery enabled
Checks that point-in-time recovery (PITR) is turned on for the DynamoDB table. PITR backs the table up continuously, so after an accidental write or delete it can be restored to any point in its recovery period (up to the last 35 days); a restore always creates a new table.
- service
- DynamoDB
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
DynamoDB → Tables → the table → Backups → Point in Time Recovery
- Turn on point-in-time recovery
- Selected
- Backup recovery period
- 1 to 35 days, how far back a restore can reach; the price is the same for any period
With the AWS CLI
aws dynamodb update-continuous-backups --table-name <table-name> --point-in-time-recovery-specification PointInTimeRecoveryEnabled=true --region <region>With Terraform
resource "aws_dynamodb_table" "this" {
name = var.table_name
point_in_time_recovery {
enabled = true
}
}
See which of your accounts this check is failing on.
Book a live scan