Sensitive ephemeral data in S3 has proper lifecycle policy
    • 24 Aug 2023
    • 1 Minute to read
    • Dark
      Light

    Sensitive ephemeral data in S3 has proper lifecycle policy

    • Dark
      Light

    Article summary

    Description

    Modify the bucket lifecycle policy to constrain data retention period consistent with organizational policies.

    Rationale

    The bucket was found to have sensitive data. Based on its meta-data and access patterns, it appears to hold ephemeral data such as interim analytical results from systems such as AWS Athena or other. It is a best practice to configure a lifecycle policy for such data to avoid proliferation of unused sensitive data.

    Remediation

    From the console

    Follow the guidance on managing your storage lifecycle to modify the bucket settings for data expiration and lifecycle.