Policy: AWS > Logs > Log Group > Retention

Determine the action to take when an AWS Logs log group retention period is not configured according to the AWS > Logs > Log Group > Retention > * policies.

The control determines whether the log group has an appropriate retention period set, and if not, has the ability to update the retention period. When running an automated compliance environment, it's important to ensure log groups have appropriate retention periods to balance storage costs with compliance requirements.

The Retention control checks the retention period of all defined Retention policies for the resource (AWS > Logs > Log Group > Retention > *), raises an alarm, and takes the defined enforcement action. Each Retention sub-policy can calculate a status of compliant, non-compliant or skipped.