Rule: RDS DB Instance Protected by Backup Plan
Ensure RDS DB instances are protected by a backup plan for data security and disaster recovery.
| Rule | RDS DB instance should be protected by backup plan |
| Framework | SOC 2 |
| Severity | ✔ High |
Rule Description:
The RDS (Relational Database Service) DB instance must have a backup plan in place to ensure data protection and compliance with SOC 2 (Service Organization Control 2) requirements.
Troubleshooting Steps:
- 1.Verify if there is an existing backup plan for the RDS DB instance.
- 2.Check if the backup plan is properly configured and scheduled as per the SOC 2 requirements.
- 3.Ensure that the backup plan is being executed regularly and successfully.
Necessary Codes:
If no backup plan exists, the following AWS CLI command can be used to create a backup plan for the RDS DB instance:
aws rds create-db-snapshot --db-instance-identifier <db-instance-identifier> --db-snapshot-identifier <db-snapshot-identifier>
Replace
<db-instance-identifier><db-snapshot-identifier>Step-by-Step Guide for Remediation:
- 1.Log in to the AWS Management Console.
- 2.Navigate to the Amazon RDS service.
- 3.Click on "Databases" in the left-hand navigation menu.
- 4.Select the RDS DB instance that needs to be protected by a backup plan.
- 5.Click on the "Backup" tab.
- 6.Check if a backup plan exists. If not, proceed to the next step.
- 7.Click on the "Create snapshot" button.
- 8.In the "DB snapshot identifier" field, enter a unique name for the DB snapshot.
- 9.Click on the "Create snapshot" button to initiate the backup plan creation process.
- 10.Validate that the backup plan has been created successfully.
- 11.Configure a regular backup schedule for the RDS DB instance.
- 12.Set retention periods for the snapshots according to your organization's requirements and SOC 2 standards.
- 13.Monitor the backup process to ensure that backups are completed successfully.
- 14.Regularly review and update the backup plan if necessary to meet evolving business and compliance needs.
Remember to update the backup plan and retention policies periodically to align with changes in your business requirements and SOC 2 compliance standards.