AWSConfigRemediation-EnablePITRForDynamoDbTable - Amazon Systems Manager Automation runbook reference
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWSConfigRemediation-EnablePITRForDynamoDbTable

Description

The AWSConfigRemediation-EnablePITRForDynamoDbTable runbook enables point-in-time recovery (PITR) on the Amazon DynamoDB table you specify.

Run this Automation (console)

Document type

Automation

Owner

Amazon

Platforms

Databases

Parameters

  • AutomationAssumeRole

    Type: String

    Description: (Required) The Amazon Resource Name (ARN) of the Amazon Identity and Access Management (IAM) role that allows Systems Manager Automation to perform the actions on your behalf.

  • TableName

    Type: String

    Description: (Required) The name of the DynamoDB table to enable point-in-time recovery on.

Required IAM permissions

The AutomationAssumeRole parameter requires the following actions to use the runbook successfully.

  • ssm:StartAutomationExecution

  • ssm:GetAutomationExecution

  • dynamodb:DescribeContinuousBackups

  • dynamodb:UpdateContinuousBackups

Document Steps

  • aws:executeAwsApi - Enables point-in-time recovery on the DynamoDB table you specify in the TableName parameter.

  • aws:assertAwsResourceProperty - Confirms point-in-time recovery is enabled on the DynamoDB table.