Overview
This report assesses AWS resources against 13 enabled configuration checks across the areas below. It identifies passed and failed checks, unavailable evidence, and affected resources so you can prioritize configuration changes and investigate operational gaps.
Backup Plans
- Backup Plans Minimum Retention Configured (35 days)
- Backup Plans Include Lifecycle Policies
- Backup plan should exist in a region
Backup Recovery Points
- Backup Recovery Points Do Not Expire Before Retention Period
Backup Replication
- Backup Cross-Account Replication
Backup Report Plans
- Backup report plan should exist in a region where backup plan is enabled
Backup Vaults
- Backup vaults should exist in a region
RDS Snapshots
- RDS DB clusters and instances should be configured to copy tags to snapshots
RDS DB Instances
- RDS DB instances backup retention period should be greater than or equal to 7
RDS DB Clusters
- RDS DB clusters should have enough backup retention period set
Kinesis Data Streams
- Kinesis Stream Backup Retention Check
Organizations Backup Policies
- AWS Organizations Backup Policies Configured
Data Lifecycle Manager Policies
- DLM EBS snapshot lifecycle policy should be enabled
The report includes actionable findings and remediation guidance for supported checks.