# Ensure RDS storage have backup schedule configured

- Source: https://support.icompaas.com/support/solutions/articles/62000208445-ensure-rds-storage-have-backup-schedule-configured
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [SOC2 Readiness](https://support.icompaas.com/support/solutions/62000111733) › [SOC2 Controls](https://support.icompaas.com/support/solutions/folders/62000166025)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

### Description:

RDS is a web service that makes it easier to set up, operate, and scale a relational database in the AWS Cloud. It provides cost-efficient, resizable capacity for an industry-standard relational database and manages common database administration tasks. The policy checks if RDS storage service has controlled access and its backup schedules are configured.  
  

### Rational:

RDS saves the automated backups of your DB instance according to the backup retention period that you specify. If necessary, you can recover your database to any point in time during the backup retention period.

  

### Impact:

Amazon RDS creates and saves automated backups of your DB instance during the backup window of your DB instance. RDS creates a storage volume snapshot of your DB instance, backing up the entire DB instance and not just individual databases. 

  

### Default value:

If you don't set the backup retention period, the default backup retention period is one day if you create the DB instance using the Amazon RDS API or the AWS CLI. The default backup retention period is seven days if you create the DB instance using the console.

  

### Audit:

1.  Sign in to AWS Management console
    
2.  Navigate to the RDS console at [https://console.aws.amazon.com/rds/](https://console.aws.amazon.com/rds/ "https://console.aws.amazon.com/rds/").
    
3.  Click on the **Databases** in the left navigation pane![](https://support.icompaas.com/assets/kb/ca1227d0a29ed71b.png)
    
4.  Click on the database that you want to examine
5.  Select the **Maintenance & backups** tab and go to the **Backup** section
6.  There you can check the backup is enabled or not.  
    If the current status is set to **Disabled**, follow the implementation steps to enable.

  

### Remediation:

#### Pre-requisites:

1.  Sign in as admin or IAM user with required permissions
    
2.   DB instance must be in the AVAILABLE state
    

#### Implementation Steps:

1.  Sign in to the AWS Management Console
    
2.  Open the Amazon RDS console at [https://console.aws.amazon.com/rds/](https://console.aws.amazon.com/rds/ "https://console.aws.amazon.com/rds/").
    
3.  Click on **Databases** in the navigation pane  
    ![](https://support.icompaas.com/assets/kb/4f8076706656b007.png)
    
4.   Select the DB instance that you want to edit and click on **Modify****![](https://support.icompaas.com/assets/kb/d83306e8947ae28e.png)**
    
5.  The Modify DB Instance page appears, go to the **Backup** section under Additional settings.
6.  Check the **Enable Automated Backups** checkBox and set the **Backup Retention period.** You can set the backup retention period to between 0 and 35 days.  
    ![](https://support.icompaas.com/assets/kb/c24f95ebb396de3d.png)
7.  Click on **continue**
    
8.  In the **Scheduling of modifications** section, perform one of the following actions based on your requirements:
    
    1.  Select **Apply during the next scheduled maintenance window** to apply the changes automatically during the next scheduled maintenance window.
        
    2.  Select **Apply immediately** to apply the changes right away.  
        ![](https://support.icompaas.com/assets/kb/bc3ee20651fd24da.png)
        
9.  Click on **Modify DB Instance**
    

  

#### Via CLI:

aws rds modify-db-instance \\
    --db-instance-identifier mydbinstance  \\
    --backup-retention-period 3 \\
    --apply-immediately

  

#### Backout plan:

**To delete a retained automated backup**

1.  Sign in to the AWS Management Console 
    
2.  open the Amazon RDS console at [https://console.aws.amazon.com/rds/](https://console.aws.amazon.com/rds/ "https://console.aws.amazon.com/rds/").
    
3.  In the navigation pane, choose **Automated backups**.
    
4.  On the **Retained** tab, choose the retained automated backup that you want to delete.
    
5.  From **Actions**, choose **Delete**.
    
6.  On the confirmation page, enter delete me and choose **Delete**.
    

  

**Reference:** 

    [![](https://support.icompaas.com/assets/kb/7068abc48fb3305e.png)Working with backups - Amazon Relational Database Service](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): The full SOC 2 implementation guide: scoping the Trust Services Criteria, the roadmap to a Type 2 report, and what the auditor samples.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): Teams that finish SOC 2 usually add ISO 27001 next; the control overlap is large and the guide explains what is genuinely extra.