​
More Info:

This rule ensures that the last backup recovery point for Storage Gateway volumes is created within the specified duration.

​
Risk Level

High

​
Address

Configuration

​
Compliance Standards

CBP,SEBI

​
Remediation

​
Using Console

To ensure that the last backup recovery point for Storage Gateway volumes is created within the specified duration, follow these steps using the AWS Management Console:

  1. Access the AWS Management Console: Go to the AWS Management Console at https://aws.amazon.com/ and log in with your credentials.

  2. Navigate to AWS Storage Gateway: Click on the “Services” dropdown menu at the top of the console, then select “Storage Gateway” under the “Storage” section.

  3. Select Volumes: In the Storage Gateway dashboard, click on “Volumes” from the left-hand navigation pane.

  4. Identify Volumes with No Recent Recovery Points: Review the list of volumes and identify those that do not have a recent backup recovery point created within the specified duration.

  5. Take Manual Backup: For each volume identified, manually initiate a backup to create a new recovery point within the specified duration.

  6. Monitor Backups: Regularly monitor the backup status and ensure that new recovery points are created within the specified duration for all volumes.

By following these steps, you can ensure that the last backup recovery point for Storage Gateway volumes is created within the specified duration using the AWS Management Console.

​
Using CLI

To remediate the misconfiguration of Storage Gateway volumes not having recovery points created within the specified duration in AWS using AWS CLI, you can follow these steps:

  1. Identify the Storage Gateway Volumes:

    • Use the list-gateways command to list all Storage Gateways in your account. 
      aws storagegateway list-gateways

  2. Create a Recovery Point for the Volume:

    • Use the start-gateway command to create a recovery point for the Storage Gateway volume. 
      aws storagegateway start-gateway --gateway-arn <gateway-arn> --volume-arn <volume-arn>
    • Replace <gateway-arn> with the ARN of your Storage Gateway and <volume-arn> with the ARN of the volume for which you want to create a recovery point.

  3. Verify Backup Status:

    • Use the describe-scheduled-filesystem-operations command to check the status of the backup operation. 
      aws storagegateway describe-scheduled-filesystem-operations --gateway-arn <gateway-arn> --volume-arn <volume-arn>
    • Replace <gateway-arn> with the ARN of your Storage Gateway and <volume-arn> with the ARN of the volume.

By following these steps, you can remediate the misconfiguration of Storage Gateway volumes not having recovery points created within the specified duration in AWS using AWS CLI.

​
Using Python

To remediate the misconfiguration of Storage Gateway volumes not having recovery points created within the specified duration in AWS using Python, you can follow these steps:

  1. Install Boto3: Boto3 is the Amazon Web Services (AWS) SDK for Python. You can install it using pip: 
    pip install boto3


2. Configure AWS credentials:
Make sure you have AWS credentials configured on your system. You can set it up by running:
```bash
aws configure
  1. Create a Python script: Create a Python script with the following code to create a recovery point for the Storage Gateway volume.
import boto3

# Initialize the Boto3 client for Storage Gateway
storage_gateway_client = boto3.client('storagegateway', region_name='your_aws_region')

# Specify the ARN of the Storage Gateway volume
volume_arn = 'your_volume_arn'

# Create a recovery point for the volume
response = storage_gateway_client.start_gateway_recovery_point_creation(
    GatewayARN='your_gateway_arn',
    VolumeARN=volume_arn
)

print("Recovery point creation initiated for volume with ARN:", volume_arn)

Replace placeholders: Replace ‘your_aws_region’ with the AWS region where your Storage Gateway is located, ‘your_volume_arn’ with the ARN of your Storage Gateway volume, and ‘your_gateway_arn’ with the ARN of your Storage Gateway.

  1. Run the Python Script:
    • Execute the Python script in your local environment or on an EC2 instance with appropriate IAM roles that have permissions to modify Storage Gateway configurations. 
      python your_script.py

By following these steps, you can remediate the misconfiguration of Storage Gateway volumes not having recovery points created within the specified duration in AWS using Python.