Point In Time Restore Should Be Enabled
More Info:
Ensures SQL instances can be restored to a recent point. GCP will maintain a point to which the database can be restored. This point should not drift too far into the past, or else the risk of irrecoverable data loss may occur.Risk Level
HighAddress
Security, ReliabilityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the “Point In Time Restore Should Be Enabled” misconfiguration in GCP using GCP console, please follow these steps:
- Login to the GCP console (console.cloud.google.com).
- Navigate to the Cloud SQL instances page.
- Select the instance that you want to remediate.
- Click on the Edit button at the top of the page.
- Scroll down to the Backup section.
- Under the Backup Configuration section, select the checkbox for Enable automatic backups.
- Under the Backup Configuration section, select the checkbox for Enable point-in-time recovery.
- Set the Backup retention period to the desired value.
- Click on the Save button at the bottom of the page.
Using CLI
Using CLI
To remediate the misconfiguration “Point In Time Restore Should Be Enabled” for GCP using GCP CLI, please follow the below steps:Replace INSTANCE_NAME with the name of your Cloud SQL instance and REGION with the region where your instance is located. The —backup-start-time flag specifies the time of day when automated backups should start, and the —enable-point-in-time-recovery flag enables point-in-time recovery.The output should include the following line:This indicates that point-in-time recovery is enabled for the instance.
- Open the Cloud Shell in the GCP Console.
- Run the following command to enable point-in-time recovery for all the Cloud SQL instances in the current project:
- Verify that point-in-time recovery is enabled for the instance by running the following command:
- Repeat the above steps for all the Cloud SQL instances in your project.
Using Python
Using Python
To remediate the “Point In Time Restore Should Be Enabled” misconfiguration in GCP using Python, follow these steps:This Python code will enable point-in-time recovery for a BigQuery table in GCP. You can modify it as per your specific requirements.
- Import the necessary libraries:
- Create a BigQuery client object:
- Get the dataset and table objects:
- Get the table metadata:
- Check if the table has point-in-time recovery enabled:
- If point-in-time recovery is not enabled, enable it:
- Verify that point-in-time recovery has been enabled: