Control: 5 Neptune DB clusters should have automated backups enabled
Description
This control checks whether a Neptune DB cluster has automated backups enabled, and a backup retention period greater than or equal to 7 days. The control fails if backups aren't enabled for the Neptune DB cluster, or if the retention period is less than 7 days.
Backups help you recover more quickly from a security incident and strengthen the resilience of your systems. By automating backups for your Neptune DB clusters, you'll be able to restore your systems to a point in time and minimize downtime and data loss.
Remediation
To enable automated backups and set a retention period for your Neptune DB clusters, see Enabling automated backups in the Amazon RDS User Guide. For Backup retention period, choose a value greater than or equal to 7.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_neptune_5Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_neptune_5 --shareSQL
This control uses a named query:
select arn as resource, case when backup_retention_period >= 7 then 'ok' else 'alarm' end as status, case when backup_retention_period >= 7 then title || ' automated backups enabled.' else title || ' automated backups disabled.' end as reason , region, account_idfrom aws_neptune_db_cluster;