Control: 3 Amazon Redshift clusters should have automatic snapshots enabled
Description
This control checks whether Amazon Redshift clusters have automated snapshots enabled. It also checks whether the snapshot retention period is greater than or equal to seven.
Backups help you to recover more quickly from a security incident. They strengthen the resilience of your systems. Amazon Redshift takes periodic snapshots by default. This control checks whether automatic snapshots are enabled and retained for at least seven days.
Remediation
To remediate this issue, update the snapshot retention period to at least 7.
To modify the snapshot retention period
- Open the Amazon Redshift console.
- In the navigation menu, choose
Clusters
, then choose the name of the cluster to modify. - Choose
Edit
. - Under
Backup
, setSnapshot retention
to a value of 7 or greater. - Choose
Modify Cluster
.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_redshift_3
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_redshift_3 --share
SQL
This control uses a named query:
redshift_cluster_automatic_snapshots_min_7_days