Cloud Defense Logo

Products

Solutions

Company

Book A Live Demo

Rule: RDS Aurora Clusters Should Be Protected by Backup Plan

This rule ensures that RDS Aurora clusters are safeguarded by a backup plan for data protection and disaster recovery.

RuleRDS Aurora clusters should be protected by backup plan
FrameworkGxP EU Annex 11
Severity
Medium

Ensuring RDS Aurora Clusters are Protected by Backup for Compliance with GxP EU Annex 11

Overview of EU Annex 11 Compliance for RDS Aurora Clusters

Good Practice (GxP) guidelines, including the EU Annex 11, set forth principles for computerized systems used within the pharmaceutical industry. According to EU Annex 11, systems must ensure data integrity, reliability, and availability. For Amazon RDS Aurora clusters, this means implementing adequate backup plans to safeguard data.

RDS Aurora Backup Requirements under EU Annex 11

  • Automated backups enabled
  • Retention period that complies with regulatory requirements
  • Protection against accidental or intentional data deletion
  • Regular backup validation to ensure data integrity
  • Documentation and logs for all backup operations

Troubleshooting Backup Issues

To troubleshoot backup issues in RDS Aurora:

  1. 1.
    Ensure that automated backups are turned on.
  2. 2.
    Verify that your backup retention period meets or exceeds minimum regulatory requirements.
  3. 3.
    Check the RDS event logs for any backup-related errors.
  4. 4.
    Confirm that backup storage consumption is within acceptable limits.

Creating and Managing Backups with CLI Commands

Enabling Automated Backups

aws rds modify-db-cluster --db-cluster-identifier my-cluster --backup-retention-period 35 --apply-immediately

Replace

my-cluster
with your Aurora cluster identifier and
35
with the desired retention period (in days).

Describing Backup Attributes

aws rds describe-db-cluster-snapshot-attributes --db-cluster-snapshot-identifier my-snapshot

Replace

my-snapshot
with your snapshot identifier.

Restoring from a Backup

aws rds restore-db-cluster-from-snapshot --db-cluster-identifier my-new-cluster --snapshot-identifier my-snapshot

Replace

my-new-cluster
with the name for the new cluster and
my-snapshot
with your snapshot identifier.

Remediation Steps for Non-Compliant Clusters

Step 1: Enable Automated Backups

Ensure automated backups are turned on and set the backup retention policy as needed.

Step 2: Verify Backup Configuration

Use the AWS RDS console or CLI commands to verify backup settings and adjust according to compliance needs.

Step 3: Regular Maintenance and Documentation

Set a recurring schedule to test backups and maintain documentation for all backup-related activities.

Following these steps ensures that RDS Aurora clusters abide by EU Annex 11 directives. By avoiding random filler data, we aim to keep the content precise and SEO friendly to help accelerate search engine optimization for topics related to AWS RDS Aurora and GxP compliance.

Is your System Free of Underlying Vulnerabilities?
Find Out Now