DynamoDB table should have Point-in-Time Recovery (PITR) enabled

What it checks

DynamoDB table: Point-in-Time Recovery is not enabled.

Where it applies

Terraform: aws_dynamodb_table

CloudFormation: AWS::DynamoDB::Table

How to fix it

1. Terraform: enable point_in_time_recovery { enabled = true }. CloudFormation: set PointInTimeRecoverySpecification.PointInTimeRecoveryEnabled to true. The recovery window is optional: recovery_period_in_days in Terraform or PointInTimeRecoverySpecification.RecoveryPeriodInDays in CloudFormation, from 1–35 days, with default 35 days. Recovery points become available after enablement; re-enabling resets the history.

Frameworks

• AWS FSBP DynamoDB.2
• SOC 2 CC7.4
• HIPAA 164.312(c)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules