More Info:

Automated backups of your RDS database instances should be enabled to ensure point-in-time recovery.

Risk Level

High

Address

Operational Maturity, Reliability, Security

Compliance Standards

HIPAA, NIST, SOC2, HITRUST, AWSWAF, NISTCSF, PCIDSS

Triage and Remediation

Remediation

To remediate the misconfiguration of automated backups not being enabled for AWS RDS using the AWS Management Console, follow these steps:

  1. Sign in to the AWS Management Console:

  2. Navigate to RDS Service:

    • In the AWS Management Console, navigate to the Amazon RDS service by clicking on “Services” in the top left corner and then selecting “RDS” under the Database section.
  3. Select the RDS Instance:

    • From the list of RDS instances, select the instance for which you want to enable automated backups by clicking on its identifier.
  4. Enable Automated Backups:

    • In the RDS instance details page, click on the “Modify” button to change the configuration settings.
    • Scroll down to the “Backup” section, and under the “Backup retention period” option, select a retention period for automated backups (e.g., 7 days, 30 days, etc.).
    • Check the box for “Backup retention period” to enable automated backups.
    • You can also configure the preferred backup window and backup maintenance window according to your requirements.
    • Click on the “Continue” button.
  5. Apply Changes:

    • Review the changes you have made, and click on the “Modify DB Instance” button to apply the changes to the RDS instance.
  6. Monitor the Status:

    • Once the modification is complete, monitor the status of the RDS instance to ensure that automated backups are now enabled.

By following these steps, you have successfully enabled automated backups for the AWS RDS instance using the AWS Management Console. This will help ensure that regular backups are taken automatically, providing data protection and recovery options in case of any unforeseen incidents.

Additional Reading: