iCompaas Support

Description:

RDS is a web service that makes it easier to set up, operate, and scale a relational database in the AWS Cloud. It provides cost-efficient, resizable capacity for an industry-standard relational database and manages common database administration tasks. The policy checks if RDS storage service has controlled access and its backup schedules are configured.

Rational:

RDS saves the automated backups of your DB instance according to the backup retention period that you specify. If necessary, you can recover your database to any point in time during the backup retention period.

Impact:

Amazon RDS creates and saves automated backups of your DB instance during the backup window of your DB instance. RDS creates a storage volume snapshot of your DB instance, backing up the entire DB instance and not just individual databases. 

Default value:

If you don't set the backup retention period, the default backup retention period is one day if you create the DB instance using the Amazon RDS API or the AWS CLI. The default backup retention period is seven days if you create the DB instance using the console.

Audit:

1. Sign in to AWS Management console

2. Navigate to the RDS console at https://console.aws.amazon.com/rds/.

3. Click on the Databases in the left navigation pane
4. Click on the database that you want to examine
5. Select the Maintenance & backups tab and go to the Backup section
6. There you can check the backup is enabled or not.
   If the current status is set to Disabled, follow the implementation steps to enable.

Remediation:

Pre-requisites:

1. Sign in as admin or IAM user with required permissions

2.  DB instance must be in the AVAILABLE state

Implementation Steps:

1. Sign in to the AWS Management Console

2. Open the Amazon RDS console at https://console.aws.amazon.com/rds/.

3. Click on Databases in the navigation pane
   

4.  Select the DB instance that you want to edit and click on Modify
   

5. The Modify DB Instance page appears, go to the Backup section under Additional settings.
6. Check the Enable Automated Backups checkBox and set the Backup Retention period. You can set the backup retention period to between 0 and 35 days.
   

7. Click on continue

8. In the Scheduling of modifications section, perform one of the following actions based on your requirements:

   1. Select Apply during the next scheduled maintenance window to apply the changes automatically during the next scheduled maintenance window.

   2. Select Apply immediately to apply the changes right away.
      

9. Click on Modify DB Instance

Via CLI:

aws rds modify-db-instance \
    --db-instance-identifier mydbinstance  \
    --backup-retention-period 3 \
    --apply-immediately