Redshift Reserved Node Recent Purchases Should Be Reviewed

More Info:

Ensure Redshift Reserved Node purchases are regularly reviewed for cost optimization (informational).

Risk Level

Low

Address

Cost Optimisation

Compliance Standards

CBP

Triage and Remediation

Remediation

Using Console

Using CLI

To remediate the misconfiguration “Redshift Reserved Node Recent Purchases Should Be Reviewed” for AWS Redshift using AWS CLI, follow these steps:

List all the existing reserved nodes for Redshift using the following AWS CLI command:

aws redshift describe-reserved-nodes

Review the output of the command to identify any recent purchases of reserved nodes that need to be reviewed.
If there are any recent purchases that need to be reviewed, check the details of the specific reserved node using the following AWS CLI command:

aws redshift describe-reserved-nodes --reserved-node-id <RESERVED_NODE_ID>

Replace <RESERVED_NODE_ID> with the actual ID of the reserved node that needs to be reviewed.

Analyze the details of the reserved node, including the node type, duration, upfront cost, and recurring charges.
If the reserved node purchase is not required or needs to be modified, you can modify or delete the reserved node using the following AWS CLI commands:

To modify a reserved node, use the modify-reserved-node command:

aws redshift modify-reserved-node --reserved-node-id <RESERVED_NODE_ID> --node-type <NEW_NODE_TYPE> --reserved-node-offering-id <NEW_OFFERING_ID>

Replace <RESERVED_NODE_ID> with the actual ID of the reserved node, <NEW_NODE_TYPE> with the new node type, and <NEW_OFFERING_ID> with the ID of the new offering.

To delete a reserved node, use the delete-reserved-node command:

aws redshift delete-reserved-node --reserved-node-id <RESERVED_NODE_ID>

Replace <RESERVED_NODE_ID> with the actual ID of the reserved node that needs to be deleted.

After modifying or deleting the reserved node, re-run the describe-reserved-nodes command to verify that the changes have been applied successfully.

By following these steps, you can remediate the misconfiguration “Redshift Reserved Node Recent Purchases Should Be Reviewed” for AWS Redshift using AWS CLI.

Using Python

To remediate the misconfiguration of “Redshift Reserved Node Recent Purchases Should Be Reviewed” in AWS Redshift using Python, you can follow these steps:

Use the AWS SDK for Python (Boto3) to access AWS Redshift and describe the recent purchases of reserved nodes.
Check the purchase date of each reserved node and compare it with the current date to identify any recently purchased nodes.
Send a notification or alert if any reserved nodes have been recently purchased and need to be reviewed.

Here is a sample Python code snippet to achieve this:

import boto3
from datetime import datetime

# Initialize the Redshift client
redshift_client = boto3.client('redshift')

# Describe recent purchases of reserved nodes
response = redshift_client.describe_reserved_nodes()

# Get the current date
current_date = datetime.now()

# Check the purchase date of each reserved node
for reserved_node in response['ReservedNodes']:
    purchase_date = reserved_node['OfferingType']
    if (current_date - purchase_date).days <= 30:  # Check if the node was purchased within the last 30 days
        print(f"Reserved node {reserved_node['ReservedNodeId']} was purchased on {purchase_date}. Please review this purchase.")

Make sure to replace the print statement with the appropriate action you want to take when a recently purchased reserved node is detected, such as sending an alert via email or a notification to your monitoring system.You can run this Python script periodically using a cron job or a scheduled AWS Lambda function to continuously monitor and remediate the misconfiguration of reviewing recent purchases of reserved nodes in AWS Redshift.

Additional Reading:

https://docs.aws.amazon.com/redshift/latest/mgmt/purchase-reserved-node-instance.html

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

Redshift Reserved Node Recent Purchases Should Be Reviewed

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

Additional Reading:

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation

​Additional Reading:

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

Additional Reading: