Ensure sufficient data retention period is set for AWS Kinesis Streams

Using customer managed keys will give administrators control over how data is encrypted to better meet compliance regulations, as well as allow for a more specific key rotation period. Using system-generated keys can sometimes lead to expired or exposed keys remaining in use, leading to insecure data. It is often recommended to use a customer managed key when the service is available.

In AWS Console -

1. Sign in to AWS Console and go to Kinesis dashboard.
2. In the navigation panel select Data Streams.
3. Select the Kinesis stream and select Details.
4. Check the data retention value.

In Terraform -

1. In the aws_kinesis_stream resource, set the retention_period field to a numeric value in hours.

References:
https://docs.aws.amazon.com/streams/latest/dev/kinesis-extended-retention.html
https://registry.terraform.io/providers/hashicorp/aws/3.76.1/docs/resources/kinesis_stream#retention_period