Rule: DynamoDB Tables in Backup Plan

Ensure all DynamoDB tables are included in a backup plan for data protection and recovery.

Rule	DynamoDB tables should be in a backup plan
Framework	GxP 21 CFR Part 11
Severity	✔ Medium

Rule Description:

All DynamoDB tables that are used for GxP (Good Practices) compliance under 21 CFR Part 11 should have a proper backup plan in place. This rule ensures that critical data stored in DynamoDB tables remains highly available and recoverable in case of accidental deletion, corruption, or any other data loss scenarios that can impact the compliance standards of GxP and 21 CFR Part 11.

Troubleshooting Steps (if applicable):

1.
Verify if the DynamoDB tables used for GxP compliance have a backup plan implemented.

2.
Check if the backup plan adheres to the backup frequency and retention period required by GxP 21 CFR Part 11.

3.
Ensure that the backup plan covers all relevant DynamoDB tables and their associated data.

4.
Validate if the backup data is stored in a secure and compliant manner, meeting the data integrity and confidentiality requirements.

Necessary Codes (if applicable):

To implement a backup plan for DynamoDB tables, you can use the AWS Command Line Interface (CLI). The following AWS CLI command can be used to create a backup for a DynamoDB table:

aws dynamodb create-backup --table-name <table-name> --backup-name <backup-name>

Step-by-Step Guide for Remediation:

1.
Identify the DynamoDB tables that are used for GxP compliance under 21 CFR Part 11.

2.
Determine the backup frequency and retention period mandated by GxP 21 CFR Part 11 for these tables.

3.
If an existing backup plan does not meet the compliance requirements, proceed with implementing a new backup plan.

4.
Open the AWS CLI or any other preferred command-line tool.

5.
Run the following command to create a backup for each DynamoDB table:

aws dynamodb create-backup --table-name <table-name> --backup-name <backup-name>

Replace

<table-name>

with the actual name of the DynamoDB table you want to backup and

<backup-name>

with a meaningful name for the backup. 6. Validate that the backup process completes successfully without any errors. 7. Regularly monitor and verify the backups to ensure they are up-to-date and accessible. 8. Consider automating the backup process through AWS CloudWatch Events or other compatible services to ensure continuous compliance. 9. Document the backup plan, including the backup frequency, retention period, and any necessary recovery procedures. 10. Validate and update the backup plan periodically to accommodate changes in GxP 21 CFR Part 11 requirements and any modifications to DynamoDB tables used for compliance.

By following these steps, you can ensure that DynamoDB tables used for GxP compliance under 21 CFR Part 11 have a robust backup plan in place, satisfying the regulatory requirements and allowing for quick data recovery in the event of data loss.

Rule: DynamoDB Tables in Backup Plan

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now