cis-aws-storage-6-6

name	cis-aws-storage-6.6
description	Ensure installation of the AWS Replication Agent
category	cis-storage-services
version	1.0.0
author	cyberstrike-official
tags	["cis","aws","storage","edr","replication-agent","installation","agent-deployment"]
cis_id	6.6
cis_benchmark	CIS AWS Storage Services Benchmark v1.0.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-storage-6.4","cis-aws-storage-6.5","cis-aws-storage-6.7"]
prerequisites	[]
severity_boost	{}

CIS 6.6: Ensure installation of the AWS Replication Agent (Manual)

Profile Applicability

• Level: 2

Description

Set up and verify the installation of the AWS Replication Agent on all relevant systems to facilitate efficient and reliable data replication. This process includes downloading the agent, configuring it according to best practices, and ensuring it is correctly integrated with your AWS environment. Regularly check the agent's performance and update it as needed to maintain optimal functionality and data integrity during replication processes.

Rationale

Installing the AWS Replication Agent is crucial for enabling efficient and reliable data replication, ensuring that critical data is accurately duplicated across systems. Proper configuration and integration with your AWS environment optimize the agent's performance, enhancing data availability and disaster recovery capabilities. Regular checks and updates of the replication agent help maintain its effectiveness, ensuring data integrity and minimizing the risk of replication failures.

Impact

Agent installation and maintenance requires:

• Agent download and installation on all source servers
• Proper configuration aligned with best practices
• Network connectivity verification
• Ongoing performance monitoring
• Regular agent updates
• IAM credentials for agent authentication

Audit Procedure

Via AWS Console

1. Obtain Agent Installer Link:

   • On the source servers page, from Actions, choose add servers to obtain the agent installer link.

2. Download Agent Installer:

   • On your source server (in our case, the EC2 instance that was already created) download the appropriate agent installer for your operating system.
   • For Linux instance on US-East-1, substitute your region in the {Region} brackets of this command:

wget -O ./aws-replication-installer-init https://aws-elastic-disaster-recovery-{Region}.s3.{Region}.amazonaws.com/latest/linux/aws-replication-installer-init

3. Run Installation Command:

chmod +x aws-replication-installer-init; sudo ./aws-replication-installer-init

4. Enter Region:

   • Type in your region. Region is case sensitive; if you're in us-east-1, make sure you type "us-east-1".