Rule: RDS DB Instance Backup Should Be Enabled

Rule Description

Remediation Steps

2. 1.

   Step 1: Access the AWS Management Console

   • Open a web browser and visit the AWS Management Console at https://console.aws.amazon.com/.
4. 2.

   Step 2: Navigate to the Amazon RDS Dashboard

   • Once logged in, navigate to the Amazon RDS Dashboard by clicking on "Services" at the top of the page and then selecting "RDS" under "Database."
6. 3.

   Step 3: Select the RDS DB Instance

   • In the RDS Dashboard, locate and click on the RDS DB instance for which you want to enable backups.
8. 4.

   Step 4: Enable Automatic Backups

   • Within the DB Instance details page, click on the "Modify" button located in the upper-right corner.
10. 5.

    Step 5: Enable Automated Backups

    • In the modify settings page, scroll down to the "Backup" section.
    • Under "Backup Retention Period," select an appropriate retention period for your backups.
    • Check the box next to "Enable Automatic Backups" to enable automated backups.
12. 6.

    Step 6: Set Backup Window

    • Set the preferred backup window by selecting values for "Backup Window" and "Preferred Backup Window" fields.
14. 7.

    Step 7: Save Changes

    • Scroll down to the bottom of the page and click on the "Modify DB Instance" button to save the changes.

Troubleshooting Steps

2. 1.

   Missing Permissions

   • Ensure that you have the necessary permissions to modify the RDS DB instance. Check your IAM (Identity and Access Management) user or role policies to verify the required permissions.
4. 2.

   AWS CLI

   • If you prefer using the AWS Command Line Interface (CLI) instead of the AWS Management Console, ensure you have the AWS CLI installed and configured correctly.
   • Use the following AWS CLI command to enable automatic backups for an RDS DB instance:

     aws rds modify-db-instance --db-instance-identifier <instance-identifier> --backup-retention-period <retention-period> --apply-immediately --backup-window <preferred-window> --preferred-backup-window <preferred-window>
     

     Replace

     <instance-identifier>

     ,

     <retention-period>

     , and

     <preferred-window>

     with appropriate values.
6. 3.

   Backup Window Conflict

   • If you receive an error regarding a backup window conflict, it means that the selected backup window overlaps with a maintenance window. Adjust the backup window or schedule your backups during a different time period to resolve the conflict.
8. 4.

   Backup Retention Limit

   • Be aware that there is a limit on the maximum backup retention period. Make sure you adhere to the limits defined by AWS. If your selected backup retention period exceeds the limit, modify it accordingly.

Conclusion