Amazon_RDS_6

Ensure Relational Database Service backup retention policy is set

Description

Amazon Relational Database Service (RDS) is a managed relational database service which handles routine database tasks such as provisioning, patching, backup, recovery, failure detection, and repair.
There are 6 database engines available for customer to run their database workloads on:

  • Amazon Aurora (MySQL Compatible)
  • MySQL
  • MariaDB
  • Oracle
  • Microsoft SQL Server
  • PostgreSQL

Remediation

Using the Amazon unified command line interface:

  • Modify each DB instance with Backup Retention Period of 0, and set a desired Backup Retention Period in days (recommended value = 7):
    aws rds modify-db-instance –db-instance-identifier <your_db_instance> –backup-
    retention-period <backup_retention_period>

References:

  1. http://docs.aws.amazon.com/cli/latest/reference/rds/describe-db-instances.html
  2. http://docs.aws.amazon.com/cli/latest/reference/rds/modify-db-instance.html

Service

RDS

Severity

Low

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!