Turbot Guardrails Hub 
Hub
Mods
AWS
171
Mods
429
Resource Types
6,702
Policies
2,320
Controls
1,637
Quick Actions
524
IAM

Policy: AWS > DynamoDB > Backup > Approved > Regions

A list of AWS regions in which AWS DynamoDB backups are approved for use.

The expected format is an array of regions names. You may use the '*' and '?' wildcard characters.

This policy will be evaluated by the Approved control. If an AWS DynamoDB backup is created in a region that is not in the approved list, it will be subject to the action specified in the AWS > DynamoDB > Backup > Approved policy.

See Approved for more information.

Note: It is recommended to include approved regions in this policy in the AWS > DynamoDB > Permissions > Lockdown > Backup Approved Regions policy as well, to ensure that the lockdown policy will not restrict these approved regions.

Resource Types

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Policy Specification

Default template
{% if $.regions | length == 0 %} [] {% endif %}{% for item in $.regions %}- '{{ item }}'
{% endfor %}
Default template input
|
  {
    regions: policy(uri: "tmod:@turbot/aws-dynamodb#/policy/types/dynamodbApprovedRegionsDefault")
  }

Category

In Your Workspace

Developers