3.7 Ensure Relational Database Service backup retention policy is set


Amazon Relational Database Service (RDS) is a managed relational database service which handles routine database tasks such as provisioning, patching, backup, recovery, failure detection, and repair.

There are 6 database engines available for customer to run their database workloads on:

* Amazon Aurora (MySQL Compatible)
* MariaDB
* Oracle
* Microsoft SQL Server
* PostgreSQL
Provides a managed backup function of the RDS Database, it is possible to define the backup window and retention period of the backup. Each customer should have a retention policy set for the type of data being stored. Recommend setting this to at least 7.

Possible values are from 0 to 35 days.


Using the Amazon unified command line interface:

* Modify each DB instance with Backup Retention Period of 0, and set a desired Backup Retention Period in days (recommended value = 7):

aws rds modify-db-instance --db-instance-identifier <your_db_instance> --backup-retention-period _<backup_retention_period>_

See Also


Item Details


References: 800-53|CP-9

Plugin: amazon_aws

Control ID: d313b8f00c6d1b6e7a3114612db6ad768e288c6c2fc9ff7811a09742dc3494b1