FSx Should Have Backup Plan
More Info:
This rule checks if Amazon FSx File Systems are protected by a backup plan. The rule is NON_COMPLIANT if the Amazon FSx File System is not covered by a backup plan.Risk Level
HighAddress
ConfigurationCompliance Standards
CBP,SEBI,RBI_MD_ITFTriage and Remediation
Using Console
Using Console
To remediate the misconfiguration of FSx not having a backup plan for AWS EC2 using the AWS Management Console, follow these steps:
- Sign in to the AWS Management Console: Go to https://aws.amazon.com/ and sign in to the AWS Management Console using your credentials.
- Navigate to Amazon FSx service: Click on the “Services” dropdown menu at the top of the console, then select “FSx” under the “Storage” category.
- Select the FSx file system: In the FSx console, select the FSx file system that you want to create a backup plan for by clicking on its name.
-
Create a Backup Plan:
- In the left-hand navigation pane, click on “Backup” and then click on the “Backup plans” tab.
- Click on the “Create backup plan” button.
- Enter a name for the backup plan and configure the backup settings according to your requirements. This includes defining the backup frequency, retention period, and any lifecycle policies.
- Review the backup plan settings and click on the “Create” button to create the backup plan.
-
Assign the Backup Plan to the FSx file system:
- After creating the backup plan, go back to the FSx file system details page.
- Click on the “Backup” tab and then click on the “Associate backup plan” button.
- Select the backup plan that you just created from the dropdown menu and click on the “Associate” button to assign the backup plan to the FSx file system.
-
Verify Backup Plan:
- Once the backup plan is associated with the FSx file system, verify that the backup plan is active and running as expected.
- Monitor the backup status and ensure that backups are being taken according to the defined schedule.
Using CLI
Using CLI
To remediate the misconfiguration of not having a backup plan for FSx on AWS EC2 using AWS CLI, you can follow these steps:
- Install and Configure AWS CLI: If you haven’t already installed and configured the AWS CLI, you can do so by following the instructions provided in the AWS documentation: Installing the AWS CLI and Configuring the AWS CLI.
-
Enable Backup for FSx File Systems:
You can enable backup for your FSx file systems using the AWS CLI by running the following command:
Replace
fs-1234567890abcdef0with the ID of your FSx file system andbackup-0abcdef1234567890with the ID of the backup you want to associate with the file system. You can adjust theAutomaticBackupRetentionDaysandThroughputCapacityvalues as needed. -
Verify Backup Configuration:
To ensure that backup has been successfully enabled for your FSx file system, you can run the following command:
This command will provide detailed information about your FSx file system, including its backup configuration.
-
Automate Backup Scheduling (Optional):
If you want to automate the scheduling of backups for your FSx file system, you can create a backup policy using the AWS CLI. Here is an example command to create a backup policy:
This command will create a backup policy for the specified file system that triggers a daily backup at 01:00:00 UTC and retains the backups for 30 days.
Using Python
Using Python
To remediate the misconfiguration of not having a backup plan for FSx in AWS, you can create a backup plan using Python Boto3 library. Here are the step-by-step instructions to remediate this issue:Replace
-
Install Boto3 library:
-
Configure AWS credentials:
Ensure that you have configured your AWS credentials either by setting environment variables or using AWS CLI
aws configurecommand. - Use the following Python script to create a backup plan for FSx in AWS EC2:
'your-file-system-arn1', 'your-file-system-arn2' with the ARNs of the EFS file systems you want to protect, and 'your-backup-vault-name' with the name of the backup vault where backups will be stored. This script creates a backup plan for the specified EFS file systems, ensuring they are protected by backups according to the specified schedule and retention policy. Adjust the backup plan settings as needed.