AWSConfigRemediation-EnablePITRForDynamoDbTable - AWS Systems Manager Automation Runbook Reference
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

AWSConfigRemediation-EnablePITRForDynamoDbTable

Description

The AWSConfigRemediation-EnablePITRForDynamoDbTable runbook enables point-in-time recovery (PITR) on the Amazon DynamoDB table you specify.

Run this Automation (console)

Document type

Automation

Owner

Amazon

Platforms

Databases

Parameters

  • AutomationAssumeRole

    Type: String

    Description: (Required) The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows Systems Manager Automation to perform the actions on your behalf.

  • TableName

    Type: String

    Description: (Required) The name of the DynamoDB table to enable point-in-time recovery on.

Required IAM permissions

The AutomationAssumeRole parameter requires the following actions to use the runbook successfully.

  • ssm:StartAutomationExecution

  • ssm:GetAutomationExecution

  • dynamodb:DescribeContinuousBackups

  • dynamodb:UpdateContinuousBackups

Document Steps

  • aws:executeAwsApi - Enables point-in-time recovery on the DynamoDB table you specify in the TableName parameter.

  • aws:assertAwsResourceProperty - Confirms point-in-time recovery is enabled on the DynamoDB table.