Ensure Dynamodb point in time recovery is enabled for global tables

Error: Dynamodb point in time recovery is not enabled for global tables

Bridgecrew Policy ID: BC_AWS_GENERAL_88
Checkov Check ID: CKV_AWS_165
Severity: MEDIUM

Dynamodb point in time recovery is not enabled for global tables

Description

Enabling point-in-time recovery (PITR) for Amazon DynamoDB global tables can help to protect against data loss due to accidental write or delete operations, or due to data corruption. With PITR enabled, you can restore a global table to any point in time within the specified recovery window (typically up to 35 days). This can be helpful if you need to undo unintended changes or recover from data corruption.

Fix - Buildtime

CloudFormation

  • Resource: AWS::DynamoDB::GlobalTable
  • Argument: Properties.DistributionConfig.Logging/Bucket
Resources:
  MyCloudFrontDistribution:
    Type: AWS::DynamoDB::GlobalTable
    Properties: 
			...
      Replicas: 
+       - PointInTimeRecoverySpecification: 
+       	- PointInTimeRecoveryEnabled