Rule: DynamoDB Table Protected by Backup Plan

Rule Description

Troubleshooting Steps

2. 1.

   Error: Backup plan creation failed

   • Ensure that you have the necessary permissions to create backup plans in your AWS account.
   • Check if the DynamoDB table exists and is correctly specified in the backup plan.
   • Confirm that there is sufficient available storage for the backups.
   • Review the error message for specific details and resolve any reported issues.
4. 2.

   Error: Backup plan schedule not working

   • Verify that the backup plan's schedule is accurately configured according to your desired frequency.
   • Ensure that there are no conflicts with other scheduled tasks or maintenance windows.
   • Check if the IAM role associated with the backup plan has the necessary permissions to perform backups.
6. 3.

   Error: Backup restoration failed

   • Ensure that the backup you are attempting to restore exists and is accessible.
   • Confirm that the target DynamoDB table is not actively being used or has any conflicting operations in progress.
   • Check for any specific error messages related to the restoration failure and address them accordingly.

Necessary Codes

aws backup create-backup-plan --backup-plan-name <backup_plan_name> --rule-name <rule_name> --backup-vault-name <backup_vault_name> --schedule-expression <schedule_expression> --start-window-minutes <start_window_minutes> --completion-window-minutes <completion_window_minutes> --region <region>

Step-by-step Guide for Remediation

2. 1.

   Identify the DynamoDB table: Determine the DynamoDB table(s) that require a backup plan.

4. 2.

   Create a backup vault: If you don't have a backup vault, create one to store the backups. You can use the AWS Backup service to create it either through the AWS Management Console or by using the AWS CLI command:

   aws backup create-backup-vault --backup-vault-name <backup_vault_name> --region <region>

   .

6. 3.

   Generate a backup plan: Create a backup plan that includes the desired schedule and retention period for backups. Use the AWS CLI command mentioned in the "Necessary Codes" section with appropriate values.

8. 4.

   Verify the backup plan: Double-check the created backup plan's details and confirm that it accurately reflects your intended settings.

10. 5.

    Monitor scheduled backups: Regularly monitor the execution of the backup plan and ensure that backups are occurring as scheduled. Check the AWS Backup service or relevant cloud automation tools for backup status and any reported errors.

12. 6.

    Perform backup restoration test: Periodically perform a test restore of the backup to validate its integrity. Confirm that the restored data matches the original DynamoDB table.