Enable DynamoDB Table Point-in-Time Recovery Rule
This rule ensures enabling point-in-time recovery for DynamoDB tables.
| Rule | DynamoDB table point-in-time recovery should be enabled |
| Framework | HIPAA |
| Severity | ✔ Low |
Rule/Policy Description:
DynamoDB table point-in-time recovery should be enabled for HIPAA compliance.
Description:
DynamoDB is a fully managed NoSQL database service provided by AWS. It provides high scalability and flexible data models. To comply with the Health Insurance Portability and Accountability Act (HIPAA) requirements, it is essential to enable point-in-time recovery (PITR) for DynamoDB tables. PITR allows you to restore your table to any point in time during the preceding 35 days, including all recently written data.
Troubleshooting Steps (if applicable):
If point-in-time recovery is not enabled for a DynamoDB table, you may need to follow the troubleshooting steps below:
- 1.Check if point-in-time recovery is already enabled for the DynamoDB table by accessing the AWS Management Console or by using AWS CLI.
- 2.If it is not enabled, proceed to enable point-in-time recovery for the table.
Necessary Codes (if applicable):
To enable point-in-time recovery for a DynamoDB table, you can use AWS CLI. Here is an example command:
aws dynamodb update-continuous-backups --table-name <table-name> --point-in-time-recovery-specification PointInTimeRecoveryEnabled=True
Step-by-Step Guide for Remediation:
Follow these steps to enable point-in-time recovery for a DynamoDB table:
- 1.Prerequisite: Ensure you have the necessary permissions to modify the DynamoDB table.
- 2.Open the AWS Management Console and navigate to the DynamoDB service.
- 3.In the navigation pane, select "Tables" and choose the desired table for which point-in-time recovery should be enabled.
- 4.Click on the "Overview" tab for the selected table.
- 5.Under the "Backups and restore" section, check if point-in-time recovery is already enabled.
- 6.If point-in-time recovery is not enabled, click on the "Manage continuous backups" button.
- 7.In the "Manage continuous backups" panel, click on the "Enable" button to enable point-in-time recovery for the table.
- 8.Confirm the action by reading the information regarding the costs and recovery capabilities associated with enabling point-in-time recovery and click "Enable".
- 9.Wait for the status to change to "ENABLED".
- 10.Once point-in-time recovery is enabled, you can perform restores to any desired point in time within the preceding 35 days.
It is important to note that enabling point-in-time recovery incurs additional storage costs. Ensure that you are aware of and prepared to handle the associated costs before enabling this feature.
By following the above steps, you can successfully enable point-in-time recovery for a DynamoDB table to meet HIPAA compliance requirements.