Rule: RDS Aurora clusters should be protected by backup plan

RDS Aurora clusters should have a backup plan in place to ensure data security and to comply with the CISA Cyber Essentials framework. A backup plan helps in protecting against data loss or corruption by regularly creating copies of database instances and storing them securely.

• Check if RDS Aurora clusters have a backup plan enabled.
• Verify that the backup plan is properly configured with the required retention period and frequency.
• Ensure that proper IAM roles and permissions are assigned to allow necessary operations.
• Check for any errors or warnings related to the backup plan in the CloudWatch Logs or RDS event notifications.

There are no specific codes to be provided for this rule. However, the following steps will guide you on how to enable and configure the backup plan for RDS Aurora clusters.

Access the AWS Management Console using valid credentials: console.aws.amazon.com

Navigate to the RDS service by searching for "RDS" in the AWS Management Console search bar and selecting "RDS" from the results.

In the RDS dashboard, select the appropriate Aurora cluster for which you want to enable the backup plan.

• In the cluster details, click on the "Backup" tab.
• Under the "Backup retention period" section, specify the desired retention period for backups. It is recommended to set a retention period based on your data protection requirements and compliance policies.

• Under the "Backup window" section, select the preferred time window during which backups should be performed. Make sure to choose a time when the database activity is minimal to minimize any impact on performance.

• Scroll down to the "Automated backups" section and ensure that the toggle switch is set to "Enabled". This will enable the regular automated backups for the Aurora cluster.

• Verify the chosen settings for backup retention period, backup window, and automated backups.
• Review the details and click on the "Apply immediately" button to save the changes and enable the backup plan.

By following the above step-by-step guide, you can enable and configure the backup plan for your RDS Aurora cluster, providing necessary protection for your database and ensuring compliance with the CISA Cyber Essentials framework. Regularly monitor the backups and perform periodic restore tests to validate the backup process and data recovery capability.