Ensure RDS instances have backup policy

Error: AWS RDS instance without automatic backup setting

Bridgecrew Policy ID: BC_AWS_GENERAL_46
Checkov Check ID: CKV_AWS_133
Severity: MEDIUM

AWS RDS instance without automatic backup setting

Description

This check examines the attribute backup_retention_period this should have a value 1-35, and checks if its set to 0 which would disable the backup.

This check is currently under review and maybe suppressed in future releases.

Fix - Runtime

n/a

Fix - Buildtime

Terraform

  • Resource: aws_rds_cluster
  • Argument: backup_retention_period
resource "aws_rds_cluster" "test" {
  ...
+ backup_retention_period = 35
}