S3 bucket should have versioning enabled

What it checks

S3 bucket: versioning is not enabled.

Where it applies

Terraform: aws_s3_bucket_versioning

CloudFormation: AWS::S3::Bucket

How to fix it

1. Set versioning_configuration.status to "Enabled"
2. Configure a lifecycle policy to expire noncurrent versions after 90 days to contain storage cost

Frameworks

• AWS FSBP S3.14
• SOC 2 A1.2
• SOC 2 CC7.4
• HIPAA 164.308(a)(7)
• AWS Well-Architected REL.9

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules