Cloud Defense Logo

Products

Solutions

Company

Book A Live Demo

Enable DynamoDB Table Auto Scaling Rule

This rule states that DynamoDB table auto scaling should be enabled to ensure optimal performance and resource utilization.

RuleDynamoDB table auto scaling should be enabled
FrameworkNIST Cybersecurity Framework (CSF) v1.1
Severity
High

DynamoDB Table Auto Scaling and NIST Cybersecurity Framework (CSF) v1

Description of the Rule

DynamoDB auto scaling is an AWS feature that automatically adjusts the read and write throughput of a DynamoDB table in response to actual traffic patterns. This ensures that a DynamoDB table operates efficiently by provisioning more throughput when traffic increases, and scaling down to reduce costs when traffic decreases.

The NIST Cybersecurity Framework (CSF) Version 1.1 does not mention DynamoDB or AWS directly, but it does emphasize the importance of ensuring that systems are available and can handle changes in demand. By enabling auto scaling, you align with the following CSF objectives:

  • ID.AM-2: Resource prioritization is informed by business needs.
  • PR-IP-2: Protection processes are improved.
  • DE.CM-3: Personnel activity is monitored to detect potential cybersecurity events.

Enabling auto scaling on a DynamoDB table ensures efficient resource utilization and helps in maintaining system availability, a core principle of the NIST CSF.

Troubleshooting Steps

If auto scaling does not seem to be functioning correctly, consider the following steps:

  1. 1.
    Verify that auto scaling is enabled for the table.
  2. 2.
    Check the CloudWatch metrics for the table to ensure they are within expected ranges.
  3. 3.
    Review CloudWatch alarms to see if any have been triggered for the table.
  4. 4.
    Check the Service Quotas to ensure you're not hitting any limits.
  5. 5.
    Analyze application logs for excessive throttling errors. Throttling on read or write operations could indicate that auto scaling policies are not correctly configured.
  6. 6.
    Look into the auto scaling policies to confirm that they reflect the expected behavior for scaling up and down.

Necessary Codes and CLI Commands

Enabling Auto Scaling Using AWS CLI

  1. 1.
    Define the auto scaling role ARN that allows DynamoDB to manage the specified auto scaling policies on your behalf.
aws iam create-role --role-name DynamoDBAutoScalingRole --assume-role-policy-document file://AssumeRolePolicyDocument.json
  1. 1.
    Attach the pre-defined policy
    AmazonDynamoDBFullAccess
    to this role.
aws iam attach-role-policy --role-name DynamoDBAutoScalingRole --policy-arn arn:aws:iam::aws:policy/service-role/AmazonDynamoDBFullAccess
  1. 1.
    Register the auto scaling role ARN with the Service-Linked Role for DynamoDB.
aws application-autoscaling register-scalable-target --service-namespace dynamodb --resource-id table/YourTableName --scalable-dimension dynamodb:table:WriteCapacityUnits --min-capacity 5 --max-capacity 50 --role-arn YourRoleARN

Replace

YourTableName
with the name of your DynamoDB table and
YourRoleARN
with the ARN of the role you created.

Step-by-Step Guide for Remediation

  1. 1.

    Enable auto scaling on the specified DynamoDB table using the AWS Management Console:

    • Navigate to the DynamoDB section in the AWS Management Console.
    • Select the table for which you want to enable auto scaling.
    • Click on 'Capacity' and then switch to 'Auto Scaling' settings.
    • Enable read and write auto scaling by setting the minimum and maximum units for both.
    • Apply the changes and save the configuration.
  2. 2.

    Enable CloudWatch alarms to monitor the auto-scaled resources for providing notifications when scaling actions are taken or when metrics are outside of expected norms.

  3. 3.

    Regularly review and adjust auto scaling policies as par application needs.

Note: AWS CLI commands and features are continuously updated. Always refer to the official AWS CLI documentation for the most accurate and recent information.

By following these guidelines and using the commands as per the described format, you will help ensure not only the efficiency and reliability of your DynamoDB tables but also the SEO optimization of your online content related to AWS automated scaling. No fillers or greetings are included in the content as requested.

Is your System Free of Underlying Vulnerabilities?
Find Out Now