# Ensure DynamoDB Point In Time Recovery (PITR) Enabled

- Source: https://support.icompaas.com/support/solutions/articles/62000218549-ensure-dynamodb-point-in-time-recovery-pitr-enabled
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Security Controls](https://support.icompaas.com/support/solutions/62000065178) › [AWS Services](https://support.icompaas.com/support/solutions/folders/62000097507)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

### Description:

Point-in-time recovery helps protect your DynamoDB tables from accidental write or delete operations. With point-in-time recovery, you don't have to worry about creating, maintaining, or scheduling on-demand backups.

  

### Rational:

With point-in-time recovery, you can restore that table to any point in time during the last 35 days. DynamoDB maintains incremental backups of your table. 

### Impact:

Amazon DynamoDB point-in-time recovery (PITR) provides automatic backups of your DynamoDB table data.  When enabled, point-in-time recovery provides continuous backups until you explicitly turn it off.

  

### Default Value:

By default, DynamoDB Point In Time Recovery(PITR) is disabled.

  

### Audit:

1.  Sign in to AWS Management Console
    
2.  Navigate to DynamoDB service at [https://console.aws.amazon.com/dynamodb](https://console.aws.amazon.com/dynamodb "https://console.aws.amazon.com/dynamodb")
    
3.  Click on the **Tables** in the left navigation pane![](https://support.icompaas.com/assets/kb/b8d5209a24267e18.png)
    
4.  Click on the table name you want to examine
5.  In the **overview** tab under the **Table details,** check the **Point-in-time recovery** column![](https://support.icompaas.com/assets/kb/010556800891d6ef.png)
6.  If you notice Point-in-time recovery is **DISABLED**, follow the Implementation steps to enable it
    
    ### Remediation:  
      
    Pre-requisites:
    
    1.  Login in as admin or IAM user with required permissions
        
    2.  Additional charges will apply by enabling Point-in-time recovery
        

#### Implementation Steps:

1.  Sign in to AWS Management Console
    
2.  Navigate to DynamoDB service at [https://console.aws.amazon.com/dynamodb](https://console.aws.amazon.com/dynamodb "https://console.aws.amazon.com/dynamodb")
    
3.  Click on the **Tables** in the left navigation pane
    
4.  Click on the table name you want to modify
    
5.   Switch to the Backups tab, you can see the edit option with Point-in-time recovery![](https://support.icompaas.com/assets/kb/2fe7fe9376f97677.png)
    
6.  Turn on point-in-time-recovery and save changes to **ENABLE** it.![](https://support.icompaas.com/assets/kb/ebfbb5981faefde3.png)
    

#### Via CLI:

aws dynamodb update-continuous-backups \\  
    --table-name MusicCollection \\  
    --point-in-time-recovery-specification PointInTimeRecoveryEnabled=true

####   
Backout plan:

To disable the Point-In-Time recovery do follow the same steps in the Implementation section and in step5 click on Disable.

### Reference:

[https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/pointintimerecovery\_beforeyoubegin.html](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/pointintimerecovery_beforeyoubegin.html)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.