diff --git a/tests/cloud/aws_lambda_updatefunctioncode.test.yml b/tests/cloud/aws_lambda_updatefunctioncode.test.yml
index 9a2b157e71..bc47b70de1 100644
--- a/tests/cloud/aws_lambda_updatefunctioncode.test.yml
+++ b/tests/cloud/aws_lambda_updatefunctioncode.test.yml
@@ -3,7 +3,7 @@ tests:
 - name: AWS Lambda UpdateFunctionCode
   file: cloud/aws_lambda_updatefunctioncode.yml
   pass_condition: '| stats count | where count > 0'
-  earliest_time: '-7d'
+  earliest_time: '-30d'
   latest_time: 'now'
   attack_data:
   - file_name: aws_cloudtrail_events.json