AWS S3 Buckets Lifecycle Configuration

Rule Description

Rule Code: AWS-S3-LF

An S3 Lifecycle configuration is a set of rules that define actions that Amazon S3 applies to a group of objects. For example, you might choose to transition objects to the S3 Standard-IA storage class 30 days after creating them, or archive objects to the S3 Glacier Flexible Retrieval storage class one year after creating them.

Ensure that your AWS S3 buckets is configured with Amazon S3 Lifecycle to manage your objects so that they are stored cost effectively throughout their lifecycle.

https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lifecycle-mgmt.html

Audit / Verification

Step 01. Sign in to AWS Management Console. Navigate to S3 dashboard and select the bucket that you need to check

AWS Console login

Step 2: Select the management tab and verify if any rules defined on the Lifecycle page

Step 3: Repeat step to check lifecycle configuration for other S3 buckets available in your AWS account.