DynomDB Tables Should Have Continuous Backup Enabled
More Info:
DynamoDB table without backup can result in accidental data loss. Your AWS DynamoDB tables should make use of Point-in-time Recovery (PITR) feature in order to automatically take continuous backups of your DynamoDB data.Risk Level
InformationalAddress
Reliability, SecurityCompliance Standards
HIPAA, NIST, SOC2, ISO27001, HITRUST, AWSWAF, NISTCSFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of DynamoDB tables not having continuous backup enabled in AWS using the AWS Management Console, follow these steps:
- Login to AWS Console: Go to the AWS Management Console (https://aws.amazon.com/) and log in to your account.
- Navigate to DynamoDB: Click on the “Services” dropdown menu at the top of the page, then select “DynamoDB” under the “Database” section.
- Select the Table: From the DynamoDB dashboard, select the table for which you want to enable continuous backups by clicking on its name.
- Go to Backup Tab: In the table details page, click on the “Backup” tab located in the top menu.
- Enable Continuous Backup: In the “Backup” tab, you will see an option to enable continuous backups. Click on the “Edit” button next to “Continuous Backups” to modify the settings.
- Enable Backup: In the “Edit continuous backups” window, enable the “On” option to turn on continuous backups for the selected table. You can also set the backup retention period as per your requirement.
- Save Changes: After enabling continuous backups and setting the retention period, click on the “Save changes” button to apply the configuration.
- Verification: Once saved, you should see a message confirming that continuous backups have been enabled for the DynamoDB table.
Using CLI
Using CLI
To remediate the misconfiguration of not having continuous backup enabled for an AWS DynamoDB table using AWS CLI, you can follow these steps:Replace Make sure that the
- List all the DynamoDB tables to identify the table that needs to have continuous backup enabled:
- Enable continuous backups for the identified DynamoDB table using the following command:
YOUR_TABLE_NAME with the name of the DynamoDB table for which you want to enable continuous backups.- Verify that continuous backups have been enabled for the table by describing the table:
PointInTimeRecoverySpecification shows PointInTimeRecoveryEnabled: true for the table.By following these steps, you can successfully remediate the misconfiguration of not having continuous backup enabled for an AWS DynamoDB table using AWS CLI.Using Python
Using Python
To remediate the misconfiguration of not having continuous backup enabled for AWS DynamoDB tables using Python, you can follow these steps:
-
Install the AWS SDK for Python (Boto3) if you haven’t already. You can install it using pip:
- Use the following Python script to enable continuous backups for a DynamoDB table:
-
Replace
'YOUR_TABLE_NAME'with the actual name of the DynamoDB table for which you want to enable continuous backups. - Run the Python script. It will enable continuous backups for the specified DynamoDB table.