Checks/Aws/Test-CloudwatchLogGroupRetentionPolicySpecificDaysEnabled.ps1
|
function Test-CloudwatchLogGroupRetentionPolicySpecificDaysEnabled { <# .SYNOPSIS CloudWatch log group has a retention policy of at least the configured minimum days or never expires .DESCRIPTION **CloudWatch Log Groups** are assessed for a retention period at or above the configured threshold (e.g., `365` days) or for being set to **never expire**. Log groups with shorter retention are identified. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: cloudwatch_log_group_retention_policy_specific_days_enabled [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check cloudwatch_log_group_retention_policy_specific_days_enabled for reference.', 'N/A', 'cloudwatch Resources') } |