cis-aws-database-11-7

name	cis-aws-database-11.7
description	Ensure to Enable Backup and Recovery
category	cis-database
version	2.0.0
author	cyberstrike-official
tags	["cis","aws","database","qldb","ledger","backup","recovery","disaster-recovery"]
cis_id	11.7
cis_benchmark	CIS AWS Database Services Benchmark v2.0.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-database-11.5","cis-aws-database-11.6"]
prerequisites	[]
severity_boost	{}

11.7 Ensure to Enable Backup and Recovery (Manual)

Description

Having the data backed up ensures that all the crucial information is stored securely it defends against any human errors and system errors that resulted in data loss. An organization that has a disaster recovery plan is prepared for any disruption that would impact business operations.

Rationale

Backup and recovery ensures business continuity and data protection for QLDB ledger data against accidental deletion, corruption, and system failures.

Impact

If a business does not have a backup and recovery plan it would have a negative impact on the business, which would result in less productivity, suffer data loss that cannot be restored, and loss of revenue.

Audit Procedure

Using AWS Console

1. Understand QLDB Backup and Recovery Features:
   • Familiarize yourself with the built-in backup and recovery capabilities provided by QLDB.
   • Understand the concepts of ledgers, revisions, and journal export for backup and restore operations.
2. Determine Backup and Recovery Requirements:
   • Assess your organization's backup and recovery requirements for QLDB.
   • Define the recovery point objective (RPO) and recovery time objective (RTO) that align with your business needs.
   • Determine the desired backup frequency and retention period for your QLDB data.
3. Enable Automatic Backups:
   • Open the Amazon QLDB console.
   • Select the QLDB ledger for which you want to enable automatic backups.
   • Click on the Configuration tab.
   • Under the Backup section, enable automatic backups.
   • Specify the desired backup retention period for the automatic backups.
4. Perform Manual Backups (Optional):
   • If you need additional backups or want to perform on-demand backups, initiate manual backups.
   • Open the Amazon QLDB console.
   • Select the QLDB ledger you want to back up.
   • Click on the Backups tab.
   • Choose the Create Backup option.
   • Provide a meaningful backup name and initiate the backup process.
5. Restore QLDB from Backups:
   • Open the Amazon QLDB console.
   • Go to the Backups tab.
   • Select the backup from which you want to restore the QLDB ledger.
   • Click on the Restore option.
   • Specify the desired restoration name and initiate the restoration process.