Dynamodb point in time recovery is not enabled for global tables misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_165
Category - Subcategory	Storage - Backups
Provider	AWS
Severity	MEDIUM
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

Enabling point-in-time recovery (PITR) for Amazon DynamoDB global tables can help to protect against data loss due to accidental write or delete operations, or due to data corruption. With PITR enabled, you can restore a global table to any point in time within the specified recovery window (typically up to 35 days). This can be helpful if you need to undo unintended changes or recover from data corruption.

How to Fix

Resource: AWS::DynamoDB::GlobalTable

• Arguments: Properties.DistributionConfig.Logging/Bucket [source,go]

---

Resources: MyCloudFrontDistribution: Type: AWS::DynamoDB::GlobalTable Properties: ... Replicas:

• • PointInTimeRecoverySpecification:
• • PointInTimeRecoveryEnabled

---