Detections
Analytics

4.4 Ensure that the MIN_DATA_RETENTION_TIME_IN_DAYS account parameter is set to 7 or higher

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The MIN_DATA_RETENTION_TIME_IN_DAYS account parameter can be set by users with the ACCOUNTADMIN role to set a minimum retention period for the account. This parameter does not alter or replace the DATA_RETENTION_TIME_IN_DAYS parameter value. However it may change the effective data retention time. When this parameter is set at the account level, the effective minimum data retention period for an object is determined by MAX(DATA_RETENTION_TIME_IN_DAYS, MIN_DATA_RETENTION_TIME_IN_DAYS)

Setting the MIN_DATA_RETENTION_TIME_IN_DAYS to 7 helps restore data-related objects (tables, schemas, and databases) that might have been accidentally or intentionally deleted.

Solution

Programmatically:

Set the MIN_DATA_RETENTION_TIME_IN_DAYS on the account level to 7 or higher:

ALTER ACCOUNT
 SET MIN_DATA_RETENTION_TIME_IN_DAYS=7;

Impact:

Data retention requires additional storage which will be reflected in the monthly storage charges. For more information about storage charges, see

Storage Costs for Time Travel and Fail-safe

.

See Also

https://workbench.cisecurity.org/benchmarks/14781

Item Details

References: CSCv7|10.1, CSCv7|10.2

Plugin: Snowflake

Control ID: b4add21e97daebce8c666367cc7a4df6e5854177e87a6ee15ca6f2ccb2460370