AWS-Redshift-Redshift-Automated-Snapshot-Retention-Period

Severity: Low

Description: This control ensures that Redshift clusters are configured for automatic snapshot retention periods. The snapshots are backups of Redshift clusters which are automatically incremented by Amazon Redshift for changes in cluster since last backup. These snapshots retain all the data to restore a cluster. Automated snapshots are taken at a set time or size and are stored till retention time period. The retention period needs to be set as positive number for Redshift cluster to enable automated snapshots.

Remediation Steps:

Perform following to modify database encryption on Redshift cluster :

1. Login to the AWS Management Console at https://console.aws.amazon.com.

2. Navigate to Redshift console.

3. In the navigation pane, choose CLUSTERS, then choose the cluster that you want to modify,  then click on its identifier link listed in the Cluster column.

4. On the selected cluster configuration tab, click the Cluster dropdown button from the dashboard top menu and click Modify.

5. Inside the Modify cluster dialog box, select a number between 7 and 35 from the Automated snapshot retention period dropdown list to enable automated backups and set the number of days to retain automated snapshots for the selected Redshift cluster. Leave the rest of the settings unchanged.

6. Click Modify to apply the configuration changes.

Important:

Reference:

• https://docs.aws.amazon.com/redshift/latest/mgmt/working-with-snapshots.html

• https://docs.aws.amazon.com/cli/latest/reference/redshift/modify-cluster.html