Rule: DynamoDB Table Protected by Backup Plan
Ensure DynamoDB table is protected by a backup plan to maintain data integrity and availability.
| Rule | DynamoDB table should be protected by backup plan |
| Framework | FedRAMP Low Revision 4 |
| Severity | ✔ High |
DynamoDB Table Backup Plan for FedRAMP Low Revision 4
Rule Description:
The DynamoDB table must have a backup plan in place to meet the security requirements outlined by FedRAMP Low Revision 4. This backup plan ensures that data in the table is adequately protected and can be recovered in the event of data loss or corruption.
Troubleshooting Steps:
To troubleshoot any issues related to backup plan for the DynamoDB table, follow these steps:
- 1.Verify Permissions: Ensure that the user or role performing the backup has the necessary permissions to access and perform backup operations on the DynamoDB table.
- 2.Check Backup Settings: Review the backup settings for the DynamoDB table, such as frequency and retention period, to ensure they align with the backup plan requirements.
- 3.Monitor Backup Status: Regularly monitor the backup status to ensure that backups are being performed successfully without any errors.
- 4.Check Storage Capacity: Ensure that there is sufficient storage capacity to accommodate the backup files generated by the backup plan.
- 5.Review Error Logs: Analyze any error logs or notifications related to backup failures and take appropriate actions to resolve them.
- 6.Test Data Restoration: Periodically test the data restoration process to verify that backups can be successfully restored if needed.
Necessary Codes:
In order to implement the backup plan for the DynamoDB table, use the following AWS CLI command:
aws dynamodb create-backup --table-name <table_name> --backup-name <backup_name>
Replace
<table_name><backup_name>Step-by-Step Guide for Remediation:
To create a backup plan for the DynamoDB table and meet the requirements of FedRAMP Low Revision 4, follow these steps:
- 1.
Identify the DynamoDB table: Identify the specific DynamoDB table that needs to be protected by a backup plan.
- 2.
Plan the backup frequency: Determine the frequency at which the backups should be performed based on the Recovery Point Objective (RPO) defined in the FedRAMP Low Revision 4 requirements.
- 3.
Set the retention period: Set the retention period for the backups based on the Recovery Time Objective (RTO) defined in the FedRAMP Low Revision 4 requirements.
- 4.
Create the backup plan: Use the AWS CLI command mentioned above to create a backup of the DynamoDB table. Replace
with the actual name of the table and<table_name>
with a unique name for the backup.<backup_name> - 5.
Verify backup completion: Monitor the backup status to ensure that the backup is completed without any errors. Use the AWS CLI or AWS Management Console to check the status of the backup.
- 6.
Test data restoration: Periodically test the restoration of the backup to ensure that the data can be successfully restored if needed. This step validates the reliability and effectiveness of the backup plan.
- 7.
Regularly review and update the backup plan: Continuously review the backup plan and make necessary adjustments to ensure it remains aligned with the FedRAMP Low Revision 4 requirements. Update backup frequency and retention periods if required.
By following these steps and implementing a backup plan for the DynamoDB table, you will ensure that the table is adequately protected and can be recovered in the event of data loss or corruption, meeting the requirements of FedRAMP Low Revision 4.