Rule: RDS DB Instance Should Be Protected by Backup Plan

RDS DB Instance Backup Plan for FedRAMP Low Revision 4

Rule Description

Troubleshooting Steps (if applicable)

2. 1.
   Check if the RDS DB instance is configured with automatic backups enabled.
4. 2.
   Verify that the backup retention period is set to a value that meets the compliance requirements.
6. 3.
   Ensure that the backup window is properly configured and does not conflict with other maintenance activities.
8. 4.
   Make sure that the correct IAM roles and permissions are assigned to the AWS account used to manage the RDS DB instance.
10. 5.
    Validate that the backup storage allocated for the RDS DB instance is sufficient to accommodate the backup data.
12. 6.
    Verify that the latest backups are being created at the expected intervals.

Necessary Codes (if applicable)

Remediation Steps

2. 1.

   Step 1: Log in to the AWS Management Console.

4. 2.

   Step 2: Navigate to the Amazon RDS service.

6. 3.

   Step 3: Select the appropriate region where the RDS DB instance is located.

8. 4.

   Step 4: Click on the "DB Instances" menu option on the left-hand side.

10. 5.

    Step 5: Choose the desired RDS DB instance from the list.

12. 6.

    Step 6: Under the "Instance actions" dropdown menu, select "Modify."

14. 7.

    Step 7: Scroll down to the "Backup" section.

16. 8.

    Step 8: Ensure that the "Backup retention period" is set to a value that meets the compliance requirements.

18. 9.

    Step 9: Verify that the "Backup window" does not conflict with other maintenance activities.

20. 10.

    Step 10: Review and confirm any additional settings related to the backup plan, such as the backup storage allocated.

22. 11.

    Step 11: Click on the "Modify DB instance" button to save the changes.

24. 12.

    Step 12: Monitor the RDS DB instance to ensure that backups are created at the expected intervals.