Rule: Amazon EFS Volumes Should Be In Backup Plans
Check the compliance status of Amazon EFS volumes within backup plans.
| Rule | Amazon EFS volumes should be in backup plans |
| Framework | AWS Foundational Security Best Practices |
| Severity | ✔ Medium |
Amazon EFS Volume Backup Plan
Backup plans are an essential component of maintaining data integrity and availability in any infrastructure. As part of AWS Foundational Security Best Practices, it is crucial to include Amazon EFS (Elastic File System) volumes in your backup plans. This ensures that your file system data is protected and can be recovered in the event of a failure or data loss.
Description
Amazon EFS is a scalable, fully managed file storage service provided by AWS. It provides a simple and highly available file system for your EC2 instances, enabling multiple instances to access the same file system concurrently. To ensure the continuity and recoverability of your file system data, it is necessary to incorporate Amazon EFS volumes into your backup strategy.
Troubleshooting Steps (if applicable)
If you encounter any issues while including Amazon EFS volumes in your backup plans, consider the following troubleshooting steps:
- 1.Verify that your AWS IAM role has the necessary permissions to create and manage backup plans. Ensure that the role has the required Amazon EFS permissions.
- 2.Check if your Amazon EFS file system is properly configured. Make sure it is accessible and functioning correctly.
- 3.Verify that the backup plan settings are correctly configured. Ensure that the Amazon EFS volumes are selected to be included in the backup plan.
Necessary Codes (if applicable)
There are no specific codes required for including Amazon EFS volumes in backup plans. However, you must use the AWS Backup service to create and manage your backup plans.
Step-by-Step Guide for Remediation
Here is a step-by-step guide to including Amazon EFS volumes in your backup plans using the AWS Backup service:
- 1.Sign in to the AWS Management Console.
- 2.Open the AWS Backup service.
- 3.Click on "Create backup plan" to start creating a new backup plan.
- 4.Provide a meaningful name and description for your backup plan.
- 5.Select the frequency and scheduling options for your backups.
- 6.In the "Include" section, click on "Add resource" and select "Amazon Elastic File System (EFS)" from the dropdown menu.
- 7.Choose the desired Amazon EFS volumes that you want to include in the backup plan.
- 8.Configure additional settings for the backup plan, such as retention period and lifecycle management.
- 9.Review the backup plan details and click on "Create backup plan" to create the plan.
Once your backup plan is created, the AWS Backup service will automatically take care of backing up your Amazon EFS volumes according to the specified frequency and retention settings.
Remember to regularly monitor and test the restoration process to ensure the successful recovery of your Amazon EFS volume data.