More Info:
This rule checks if a recovery point was created for Amazon FSx File Systems. The rule is NON_COMPLIANT if the Amazon FSx File System does not have a corresponding recovery point .Risk Level
HighAddress
ConfigurationCompliance Standards
CBP,SEBITriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of not having a recovery point for FSx in AWS EC2, follow these steps using the AWS Management Console:
- Login to AWS Console: Go to the AWS Management Console (https://aws.amazon.com/console/) and log in to your AWS account.
- Navigate to Amazon FSx: In the AWS Management Console, search for “FSx” in the search bar at the top and click on “Amazon FSx” under the services section.
- Select the FSx File System: Select the FSx file system for which you want to enable recovery points by clicking on its name.
- Create a Recovery Point: In the FSx file system details page, navigate to the “Actions” dropdown menu and select “Take recovery points”.
- Configure Recovery Point: In the “Create recovery point” window, you can configure the settings for the recovery point such as the name, description, and retention period. Click on the “Create recovery point” button to create the recovery point.
- Verify Recovery Point Creation: Once the recovery point is created, you can verify it by going to the “Recovery points” tab in the FSx file system details page.
- Set up Automated Backups (Optional): To ensure continuous protection of your FSx file system, you can set up automated backups by enabling the “Automatic backups” feature in the FSx file system settings.
Using CLI
Using CLI
To remediate the misconfiguration of FSx not having a recovery point for an AWS EC2 instance using AWS CLI, you can follow these steps:
-
Create a Backup for FSx File System:
- Use the following AWS CLI command to create a backup for the FSx file system:
- Replace
fs-1234567890abcdef0with the actual ID of your FSx file system. - You can also add additional tags as needed.
- Use the following AWS CLI command to create a backup for the FSx file system:
-
Verify Backup Creation:
- Use the following AWS CLI command to describe the backup and verify that it has been created successfully:
- Replace
backup-0abcdef1234567890with the actual ID of the backup created in the previous step.
- Use the following AWS CLI command to describe the backup and verify that it has been created successfully:
-
Set up Backup Policy:
- Use the following AWS CLI command to set up a backup policy for the FSx file system:
- Replace
fs-1234567890abcdef0with the actual ID of your FSx file system. - You can customize the backup policy according to your requirements.
- Use the following AWS CLI command to set up a backup policy for the FSx file system:
-
Verify Backup Policy:
- Use the following AWS CLI command to describe the file system and verify that the backup policy has been set up successfully:
- Replace
fs-1234567890abcdef0with the actual ID of your FSx file system.
- Use the following AWS CLI command to describe the file system and verify that the backup policy has been set up successfully:
Using Python
Using Python
To remediate the misconfiguration of FSx not having a recovery point for an AWS EC2 instance using Python, you can use the AWS SDK for Python (Boto3) to create a backup for the FSx file system. Here are the step-by-step instructions to remediate this issue:After running the script, a backup will be created for the FSx file system associated with your EC2 instance. This will remediate the misconfiguration of FSx not having a recovery point.
- Install Boto3: Ensure that you have the Boto3 library installed. You can install it using pip:
- Create a Backup for FSx File System: Use the following Python script to create a backup for the FSx file system associated with your EC2 instance:
- Replace the placeholders:
- Replace ‘your_region’ with the AWS region where your EC2 instance and FSx file system are located.
- Replace ‘your_instance_id’ with the ID of your EC2 instance.
- Replace ‘your_unique_token’ with a unique client request token to identify the backup request.
- Run the Python script: Save the Python script to a file (e.g., create_fsx_backup.py) and run it using the Python interpreter: