cis-aws-database-3-10

name	cis-aws-database-3.10
description	Ensure to Enable Backup and Recovery
category	cis-database
version	2.0.0
author	cyberstrike-official
tags	["cis","aws","database","rds","backup","recovery","snapshot","point-in-time"]
cis_id	3.10
cis_benchmark	CIS AWS Database Services Benchmark v2.0.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-database-3.2","cis-aws-database-3.14"]
prerequisites	[]
severity_boost	{}

3.10 Ensure to Enable Backup and Recovery (Manual)

Description

The individual logs into their AWS account and chooses their Amazon relational database that they want to backup. To have the database being backed up automatically the individual is encouraged to enable backup. This ensures that the file is being saved automatically and can prevent it from accidental loss. This ensures that the individual can restore their files quickly in the event of a data loss.

Rationale

Backups are essential for data protection, disaster recovery, and business continuity. Enabling automated backups ensures data can be restored in the event of accidental deletion, corruption, or system failure.

Impact

It would result in having the files protected and being able to retrieve those files in the event of an accidental loss.

Audit Procedure

Using AWS Console

1. Sign into the AWS Management Console

   • Sign into the AWS Management Console at https://console.aws.amazon.com/ with your AWS account credentials.

2. Open the Amazon RDS Console

   • Navigate to the service using the Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/rds/.

3. Select the RDS Instance

   • Choose the Amazon RDS instance you want to implement backup and recovery.
   • Click on the instance name to access its details page.
   • In the instance details page, navigate to the Backup & Restore or Backup section.

4. Configure Automated Backups

   • Under the Backup section.
   • Click the Modify or Edit option to configure automated backups.
   • Enable automated backups by selecting the desired backup retention period.
   • Specify the preferred backup window during which automated backups can occur.
   • Choose whether to enable Multi-AZ backups for enhanced durability and availability.
   • Click Continue or Save to apply the changes.

5. Restore from Backups

   • In the Amazon RDS console, click on Snapshots or Instances in the left-side menu.
   • Select the snapshot or instance from which you want to perform a restore.
   • Click or to initiate restoration.