🛡️ AWS Kinesis Stream Retention Period Hours is less than 7 days🟢

• Contextual name: 🛡️ Stream Retention Period Hours is less than 7 days🟢
• ID: /ce/ca/aws/kinesis/stream-retention-period
• Tags:
  • 🟢 Policy with categories
  • 🟢 Policy with type
  • 🟢 Production policy
• Policy Type: COMPLIANCE_POLICY
• Policy Categories: RELIABILITY

Logic

• 🧠 prod.logic.yaml🟢
  • 📗 AWS Kinesis Stream
  • 🔌 AWS Kinesis Stream - object.extracts.yaml
  • 🧪 test-data.json

Similar Policies

• AWS Security Hub: [Kinesis.3] Kinesis streams should have an adequate data retention period

Description

Open File

Description

This policy identifies AWS Kinesis Streams configured with a retention period of less than 168 hours (7 days).

Rationale

By default, records in a Kinesis data stream are retained for only 24 hours. Extending the retention period to 7 days provides a meaningful reliability buffer. If a downstream consumer, such as an AWS Lambda function or an application running on Amazon EC2, fails or experiences processing delays, a longer retention window ensures that data remains available while the issue is investigated and resolved.

Additionally, during periods of increased data ingestion, consumers may fall behind. A 7-day retention period allows sufficient time to scale consumer capacity and reprocess data without permanent data loss.

Many organizations also require the ability to re-run analytics or perform audits on recent data. Short retention periods increase reliance on external backup mechanisms even for recent events, adding operational complexity.

Impact

Increasing the retention period beyond the default 24 hours results in additional AWS costs, which are based on the volume of data retained and the configured retention duration.

... see more

Remediation

Open File

Remediation

Update Retention Period

From Command Line

To increase the retention period of an Amazon Kinesis Stream to 7 days (168 hours), run the following command:

aws kinesis increase-stream-retention-period \
    --stream-name {{stream-name}} \
    --retention-period-hours 168

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [Kinesis.3] Kinesis streams should have an adequate data retention period			1		no data
💼 Cloudaware Framework → 💼 System Configuration			55		no data