GCP-Storage-bucket-object-retention-policy-is-unset

Severity: Low

Description: This control ensures that object retention period is set greater than 90 days. Object retention policy should be set to a bucket to ensure data availability for a set period. This setting is recommended to set for business-critical buckets only as it may increase cost.

Remediation Steps:

Perform following to set retention policy for bucket:

  1. Sign in to GCP Console https://console.cloud.google.com.

  2. Goto the Cloud Storage browser

  3. In the list of buckets, click on the name of the desired bucket.

  4. Under Retention Policy, click edit button and set duration to greater than 90 days. 

  5. Click Save.

Important:

As a general best practice retention period should be set to at least 90 days.

Reference:

Blue Hexagon Proprietary