3.7 Ensure Relational Database Service backup retention policy is set

Information

Amazon Relational Database Service (RDS) is a managed relational database service which handles routine database tasks such as provisioning, patching, backup, recovery, failure detection, and repair.

There are 6 database engines available for customer to run their database workloads on:

* Amazon Aurora (MySQL Compatible)
* MySQL
* MariaDB
* Oracle
* Microsoft SQL Server
* PostgreSQL
Provides a managed backup function of the RDS Database, it is possible to define the backup window and retention period of the backup. Each customer should have a retention policy set for the type of data being stored. Recommend setting this to at least 7.

Possible values are from 0 to 35 days.

Solution

Using the Amazon unified command line interface:

* Modify each DB instance with Backup Retention Period of 0, and set a desired Backup Retention Period in days (recommended value = 7):

aws rds modify-db-instance --db-instance-identifier <your_db_instance> --backup-retention-period _<backup_retention_period>_

See Also

https://workbench.cisecurity.org/files/260

Item Details

Category: CONTINGENCY PLANNING

References: 800-53|CP-9

Plugin: amazon_aws

Control ID: 5136ba3b0656ec1463151e2e31a324c94f69197849da587c36d3f6c49496b5df