Production resource has no AWS Backup recovery point

What's the problem

RDS and DynamoDB (Medium) and in-use EBS volumes (Low) are not protected by an AWS Backup plan

How 6WAF detects it

• Only resources tagged Environment=production or prod are evaluated. Untagged resources are reported as not evaluated, never as passing.
• Severity follows the matching AWS Security Hub control (shown under Reference standard); where no control exists it is labelled as a 6WAF classification.
• Scanning uses an IAM Role you deploy yourself via CloudFormation; AccessDenied or throttling is recorded as not checked and never produces a finding.