Ensure that the S3 bucket has lifecycle configuration enabled

Lifecycle configuration is set of rules that defines the action S3 takes on your objects. It is important to configure these lifecycle rules for security and cost optimization purposes.

Risk Level: Low
Cloud Entity: Simple Storage Service (S3)
CloudGuard Rule ID: D9.CFT.OPE.07
Covered by Spectral: Yes
Category: Storage


AWS_S3_Bucket should have LifecycleConfiguration.Rules contain-any [ Status='Enabled' ]


From CFT
Configure AWS::S3::Bucket LifecycleConfiguration.Rules to ensure proper transition and expiration rules for objects.


  1. https://docs.aws.amazon.com/AmazonS3/latest/userguide/how-to-set-lifecycle-configuration-intro.html

Simple Storage Service (S3)

Companies today need the ability to simply and securely collect, store, and analyze their data at a massive scale. Amazon S3 is object storage built to store and retrieve any amount of data from anywhere ��� web sites and mobile apps, corporate applications, and data from IoT sensors or devices. It is designed to deliver 99.999999999% durability, and stores data for millions of applications used by market leaders in every indu

Compliance Frameworks

  • AWS CloudFormation ruleset