Amazon backup recovery point manual deletion disabled (rule)

Checks if a backup vault has an attached resource-based policy which prevents deletion of recovery points. The rule is NON_COMPLIANT if the Backup Vault does not have resource-based policies or has policies without a suitable ‘Deny’ statement. Amazon Backup recovery point manual deletion disabled.