RDS cluster backup retention should be at least 14 days

Medium AWS General aws-rds-dbcluster-backup-retention

Applies to

AWS::RDS::DBCluster

What CGPulse checks

A resource passes this rule when backupRetentionPeriod must be greater than 13. Anything else is reported as a finding with the evaluated property value attached as evidence.

How to fix it

Set backup retention to at least 14 days for production workloads. In AWS Console: RDS > Databases > Modify > set Backup retention to 14+ days. See: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html

Terraform

resource "aws_rds_cluster" "{name}" {
  backup_retention_period = 14
}

Compliance frameworks

Cloud Security: AWS Foundations
HIPAA: Health Information Protection164.308(a)(7)
NIST 800-53: Cloud Security ControlsCP-9
SOC 2: Trust ServicesA1.2

Is your environment compliant with this rule?

CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.

Run a free scan