Cloud Storage buckets should have a sufficient retention policy period
Cloud Storage bucket has a bucket-level Retention Policy with a retentionPeriod that meets or exceeds the organization-defined minimum. This prevents deletion or modification of objects before the required time.
Insufficient or missing retention allows premature deletion or modification of objects, weakening data recovery and compliance with retention requirements.
What this control checks
Bucket-level Retention Policy with a retentionPeriod at or above the organization-defined minimum.
Audit evidence
Evidence that deployed resources meet this control: Prowler check cloudstorage_bucket_sufficient_retention_period (prowler gcp --checks cloudstorage_bucket_sufficient_retention_period).
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_cloudstorage_bucket_sufficient_retention_period - Prowler Check:
cloudstorage_bucket_sufficient_retention_period
Last reviewed: 2026-10-09