Skip to main content

Triage and Remediation

Remediation

Using Console

To remediate the misconfiguration of DynamoDB tables not having continuous backup enabled in AWS using the AWS Management Console, follow these steps:
  1. Login to AWS Console: Go to the AWS Management Console (https://aws.amazon.com/) and log in to your account.
  2. Navigate to DynamoDB: Click on the “Services” dropdown menu at the top of the page, then select “DynamoDB” under the “Database” section.
  3. Select the Table: From the DynamoDB dashboard, select the table for which you want to enable continuous backups by clicking on its name.
  4. Go to Backup Tab: In the table details page, click on the “Backup” tab located in the top menu.
  5. Enable Continuous Backup: In the “Backup” tab, you will see an option to enable continuous backups. Click on the “Edit” button next to “Continuous Backups” to modify the settings.
  6. Enable Backup: In the “Edit continuous backups” window, enable the “On” option to turn on continuous backups for the selected table. You can also set the backup retention period as per your requirement.
  7. Save Changes: After enabling continuous backups and setting the retention period, click on the “Save changes” button to apply the configuration.
  8. Verification: Once saved, you should see a message confirming that continuous backups have been enabled for the DynamoDB table.
By following these steps, you have successfully remediated the misconfiguration of DynamoDB tables not having continuous backups enabled in AWS using the AWS Management Console.

To remediate the misconfiguration of not having continuous backup enabled for an AWS DynamoDB table using AWS CLI, you can follow these steps:
  1. List all the DynamoDB tables to identify the table that needs to have continuous backup enabled:
  1. Enable continuous backups for the identified DynamoDB table using the following command:
Replace YOUR_TABLE_NAME with the name of the DynamoDB table for which you want to enable continuous backups.
  1. Verify that continuous backups have been enabled for the table by describing the table:
Make sure that the PointInTimeRecoverySpecification shows PointInTimeRecoveryEnabled: true for the table.By following these steps, you can successfully remediate the misconfiguration of not having continuous backup enabled for an AWS DynamoDB table using AWS CLI.
To remediate the misconfiguration of not having continuous backup enabled for AWS DynamoDB tables using Python, you can follow these steps:
  1. Install the AWS SDK for Python (Boto3) if you haven’t already. You can install it using pip:
  2. Use the following Python script to enable continuous backups for a DynamoDB table:
  1. Replace 'YOUR_TABLE_NAME' with the actual name of the DynamoDB table for which you want to enable continuous backups.
  2. Run the Python script. It will enable continuous backups for the specified DynamoDB table.
After following these steps, continuous backups will be enabled for the specified DynamoDB table, thereby remediating the misconfiguration.
Enabling point_in_time_recovery.enabled = true turns on DynamoDB PITR and incurs additional costs; review DynamoDB pricing before applying. This change is an in-place update and does not force replacement of the table.To verify, terraform plan should show an in-place update on aws_dynamodb_table.THIS_TABLE with:
  • point_in_time_recovery.enabled changing from false (or null) to true.