Elastic File System Should Have Backup Plan

More Info:

This rule checks if Amazon Elastic File System (Amazon EFS) File Systems are protected by a backup plan. The rule is NON_COMPLIANT if the EFS File System is not covered by a backup plan.

Risk Level

High

Address

Configuration

Compliance Standards

CBP,SEBI

Triage and Remediation

Remediation

Using Console

Using CLI

To remediate the misconfiguration of not having a backup plan for Elastic File System (EFS) in AWS EC2 using AWS CLI, you can follow these steps:

Create a Backup Plan:

Use the AWS CLI command create-backup-plan to create a backup plan for your EFS file system.
Specify the backup plan details such as name, schedule, retention policy, and backup vault.

Example command:

aws backup create-backup-plan --backup-plan "Name=MyBackupPlan,BackupPlanRule={RuleName=DailyBackup,ScheduleExpression=\"cron(0 0 * * ? *)\",TargetBackupVaultName=MyBackupVault,StartWindowMinutes=60,CompletionWindowMinutes=120,Lifecycle={MoveToColdStorageAfterDays=30,DeleteAfterDays=90}}"

Assign Backup Plan to EFS File System:
- Use the AWS CLI command put-backup-vault-access-policy to assign the created backup plan to your EFS file system.
- Specify the EFS file system ID and the ARN of the backup plan.
- Example command:
  aws backup put-backup-vault-access-policy --backup-vault-name MyBackupVault --policy "{\"BackupPlanId\":\"arn:aws:backup:us-west-2:123456789012:backup-plan:MyBackupPlan\"}"
Enable Backup for EFS File System:
- Use the AWS CLI command start-backup-job to initiate the backup process for your EFS file system.
- Specify the EFS file system ID and the backup vault name.
- Example command:
  aws backup start-backup-job --backup-vault-name MyBackupVault --resource-arn arn:aws:elasticfilesystem:us-west-2:123456789012:file-system/fs-12345678
Verify Backup Status:
- Use the AWS CLI command describe-backup-job to check the status of the backup job for your EFS file system.
- Monitor the progress and ensure that the backup is successfully completed.
- Example command:
  aws backup describe-backup-job --backup-job-id abcdef12-3456-7890-abcd-1234567890ab

By following these steps, you can remediate the misconfiguration of not having a backup plan for your EFS file system in AWS EC2 using AWS CLI. This will help you ensure data protection and recovery in case of any unexpected data loss or corruption.

Using Python

To remediate the misconfiguration of not having a backup plan for Elastic File System (EFS) in AWS EC2 using Python, you can follow these steps:

Install Boto3: Boto3 is the AWS SDK for Python. You can install it using pip:
```
pip install boto3
```

Create a Backup Plan: You can create a backup plan using AWS Backup service. Here’s an example Python script to create a backup plan for your EFS:

import boto3

# Initialize the AWS Backup client
backup_client = boto3.client('backup')

# Define the resource ARN for your EFS file system
resource_arn = 'arn:aws:elasticfilesystem:us-east-1:123456789012:file-system/fs-12345678'

# Define the backup plan name and backup rule
backup_plan_name = 'EFS-Backup-Plan'
backup_rule = {
    'RuleName': 'EFS-Backup-Rule',
    'TargetBackupVaultName': 'MyBackupVault',
    'ScheduleExpression': 'cron(0 12 * * ? *)',  # Daily backup at 12:00 PM UTC
    'StartWindowMinutes': 60,
    'CompletionWindowMinutes': 60
}

# Create a backup plan
response = backup_client.create_backup_plan(
    BackupPlan = {
        'BackupPlanName': backup_plan_name,
        'BackupPlanRule': backup_rule
    }
)

print('Backup plan created successfully!')

Make sure to replace the resource_arn with the ARN of your EFS file system and customize the backup plan name, rule, and schedule as needed.

Run the Python Script: Save the above Python script in a file (e.g., create_backup_plan.py) and run it using Python:
```
python create_backup_plan.py
```
Verify Backup Plan: You can verify the backup plan by checking the AWS Backup console or by listing the backup plans using the AWS CLI:
```
aws backup list-backup-plans
```

By following these steps, you can create a backup plan for your EFS file system in AWS EC2 using Python and ensure that you have a backup strategy in place for your data.

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

Elastic File System Should Have Backup Plan

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation