Control: 16 RDS DB clusters should be configured to copy tags to snapshots

Description

This control checks whether RDS DB clusters are configured to copy all tags to snapshots when the snapshots are created.

Identification and inventory of your IT assets is a crucial aspect of governance and security. You need to have visibility of all your RDS DB clusters so that you can assess their security posture and take action on potential areas of weakness. Snapshots should be tagged in the same way as their parent RDS database clusters. Enabling this setting ensures that snapshots inherit the tags of their parent database clusters.

Remediation

To enable automatic tag copying to snapshots for a DB cluster

1. Open the Amazon RDS console.
2. Choose Databases.
3. Select the DB cluster to modify.
4. Choose Modify.
5. Under Backup, select Copy tags to snapshots.
6. Choose Continue.
7. Under Scheduling of modifications, choose when to apply modifications. You can choose either Apply during the next scheduled maintenance window or Apply immediately.