More Info:
This rule ensures that the last backup recovery point for Storage Gateway volumes is created within the specified duration.Risk Level
HighAddress
ConfigurationCompliance Standards
CBP,SEBITriage and Remediation
- Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of not having Recovery Points created for Storage Gateway in AWS using the AWS Management Console, follow these steps:
- Login to AWS Console: Go to the AWS Management Console (https://aws.amazon.com/console/) and log in to your AWS account.
- Navigate to RDS Service: Click on the ‘Services’ dropdown menu at the top left corner of the console, then select ‘RDS’ under the ‘Database’ section.
- Select the RDS Instance: In the RDS dashboard, select the RDS instance for which you want to enable Recovery Points by clicking on the checkbox next to the instance name.
- Enable Automated Backups: Click on the ‘Modify’ button at the top of the dashboard to modify the settings of the selected RDS instance.
- Configure Backup Settings: Scroll down to the ‘Backup’ section of the Modify DB Instance page. Here, you will find the ‘Backup retention period’ setting. Set the desired number of days for which you want to retain automated backups. This will ensure that recovery points are created and retained for the specified period.
- Enable Automated Backups: Make sure that the ‘Backup retention period’ is set to a value greater than 0 to enable automated backups for the RDS instance.
- Save Changes: Scroll down to the bottom of the page and click on the ‘Continue’ button, review the changes, and then click on the ‘Modify DB Instance’ button to save the changes.
- Verify Configuration: Once the modification is completed, go back to the RDS dashboard and check the ‘Backup’ section of the RDS instance to ensure that automated backups are enabled and the backup retention period is set as per your configuration.
Using CLI
Using CLI
To remediate the misconfiguration of not having Storage Gateway Recovery Point created for AWS Storage Gateway using AWS CLI, you can follow these steps:Step 1: Open your terminal or command prompt and ensure that you have AWS CLI installed and configured with the necessary permissions to work with RDS.Step 2: Run the following AWS CLI command to modify the RDS instance to enable automated backups and set the backup retention period. Replace Step 3: Check the status of the modification by running the following command:Step 4: Once the modification is complete and the RDS instance status is available, automated backups will be enabled, and recovery points will be created based on the specified retention period.By following these steps, you can remediate the misconfiguration of not having Storage Gateway Recovery Point created for AWS RDS using AWS CLI.
your-rds-instance-identifier with the actual identifier of your RDS instance and 7 with the desired backup retention period in days.Using Python
Using Python
To remediate the misconfiguration of not having Storage Gateway Recovery Point created for AWS RDS instances, you can use Python and AWS Boto3 library to create a manual snapshot of the RDS instance. Here are the step-by-step instructions to remediate this issue:
- Install Boto3 library: Ensure you have the Boto3 library installed. You can install it using pip:
- Configure AWS credentials: Make sure you have AWS credentials configured on your system. You can set it up by running:
- Write Python script to create a manual snapshot: Create a Python script (e.g., create_rds_snapshot.py) with the following code snippet:
- Run the Python script: Execute the Python script using the following command:
- Verify the manual snapshot: Go to the AWS Management Console, navigate to the RDS service, select your RDS instance, and check if the manual snapshot was created successfully.

