AWS-RDS-RDS-Automated-Backups

Severity: Medium

Description: This control ensures that automated backup is enabled for an RDS Database Instance by configuring the backup retention period more than 0. Backups are an important part in maintaining the availability of data in case of any malfunctions or issues. They provide a reliable checkpoint to which the system can be restored. It is highly recommended to enable automated backups on production RDS database instances to maintain the availability of the data and support database operations like recovery and rollbacks to a stable point if or when an issue occurs.

Remediation Steps:

Perform following to update permission for EBS :

1. Login to the AWS Management Console at https://console.aws.amazon.com as root user.

2. Navigate to RDS console.

3. In the navigation pane, Click on Databases.

4. Click on the Database instance to be modified, click Modify.

5. Under Backup, configure Backup retention period to a value greater than 0.

6. Click on the Continue.

7. Under Scheduling of modifications, select Apply Immediately.

8. Click on Modify DB Instance.

Important:

• Storing database instance backups may incur an additional cost.

Reference :

• https://docs.aws.amazon.com/cli/latest/reference/rds/modify-db-instance.html

• https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html