Control: 14 Amazon Aurora clusters should have backtracking enabled
Description
This control checks whether Amazon Aurora clusters have backtracking enabled.
Backups help you to recover more quickly from a security incident. They also strengthens the resilience of your systems. Aurora backtracking reduces the time to recover a database to a point in time. It does not require a database restore to do so.
Remediation
For detailed instructions to enable Aurora backtracking, see Configuring backtrack with the console when modifying a DB cluster.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_rds_14Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_rds_14 --shareSQL
This control uses a named query:
rds_db_cluster_aurora_backtracking_enabled