Neptune DB Cluster Should Have Backup Retention Check
More Info:
Checks if an Amazon Neptune DB cluster retention period is set to specific number of days. The rule is NON_COMPLIANT if the retention period is less than the value specified by the parameter.Risk Level
MediumAddress
ConfigurationCompliance Standards
CBP,SEBITriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of Neptune DB Cluster not having backup retention check in AWS RDS using the AWS Management Console, follow these steps:
- Login to AWS Console: Go to the AWS Management Console (https://aws.amazon.com/console/) and login using your credentials.
- Navigate to Amazon Neptune: Click on the “Services” dropdown in the top menu, then select “Neptune” under the Database section.
- Select Neptune DB Cluster: From the list of Neptune DB Clusters, click on the DB Cluster that you want to configure backup retention for.
- Modify Backup Retention: In the Neptune DB Cluster dashboard, click on the “Modify” button to change the configuration settings.
- Set Backup Retention Period: Scroll down to the “Backup” section and locate the “Backup Retention Period” setting. Set the desired backup retention period in days. Ensure that the checkbox for “Backup Retention” is checked.
- Apply Changes: Scroll to the bottom of the page and click on the “Continue” button.
- Review and Apply Changes: Review the changes you have made to the Neptune DB Cluster configuration. Once you are satisfied, click on the “Modify Cluster” button to apply the changes.
- Monitor Configuration Changes: After applying the changes, monitor the Neptune DB Cluster to ensure that the backup retention check is configured correctly.
Using CLI
Using CLI
To remediate the misconfiguration for Neptune DB Cluster backup retention check in AWS RDS using AWS CLI, follow these steps:
-
Check Current Backup Retention Settings:
Run the following AWS CLI command to check the current backup retention settings for your Neptune DB Cluster:
-
Update Backup Retention Period:
Run the following AWS CLI command to modify the backup retention period for your Neptune DB Cluster. Replace
YOUR_DB_CLUSTER_IDENTIFIERwith the actual identifier of your Neptune DB Cluster andNEW_RETENTION_PERIODwith the desired retention period in days: -
Verify Backup Retention Settings:
Run the following AWS CLI command to verify that the backup retention period has been updated successfully:
-
Enable Automated Backups (if not already enabled):
If automated backups are not already enabled for your Neptune DB Cluster, you can enable them using the following AWS CLI command:
- Monitor Backup Retention: Regularly monitor the backup retention settings for your Neptune DB Cluster to ensure that the configured retention period meets your data protection and compliance requirements.
Using Python
Using Python
To remediate the misconfiguration of Neptune DB Cluster not having backup retention check for AWS RDS using Python, you can follow these steps:
-
Install the AWS SDK for Python (Boto3) if you haven’t already. You can install it using pip:
- Create a Python script with the following code to enable backup retention for your Neptune DB Cluster:
-
Replace
'your_region'with the AWS region where your Neptune DB Cluster is located and'your_neptune_cluster_identifier'with the actual name of your Neptune DB Cluster. - Run the Python script. After successful execution, the backup retention period for your Neptune DB Cluster will be set to the specified number of days (in this case, 7 days).