Description

Detects DynamoDB tables that have Point-in-Time Recovery (PITR) disabled. PITR is a critical backup feature that helps protect against accidental writes or deletes by maintaining continuous backups of your DynamoDB table data. Without PITR enabled, you may not be able to restore your table to a specific point in time in case of data loss or corruption.

Detection Strategy

• Scans all DynamoDB tables in the specified AWS region

• Checks the continuous backup settings for each table

• Reports a vulnerability if a table's PointInTimeRecoveryStatus is set to 'DISABLED'

• Each vulnerability includes the table's ARN and its current PITR configuration status