Medium
FSx
Regional
FSx for NetApp ONTAP file systems should be configured for Multi-AZ deployment
NIST 800-53
Description
This control checks whether an Amazon FSx for NetApp ONTAP file system is configured to use a multiple Availability Zones (Multi-AZ) deployment type. The control fails if the file system is not configured to use a Multi-AZ deployment type. It is recommended to use a Multi-AZ deployment type for most production workloads. Multi-AZ deployment types offer high availability and durability. Multi-AZ file systems support all the availability and durability features of Single-AZ file systems and are designed to provide continuous availability to data even when an Availability Zone (AZ) is unavailable.
Remediation
To configure your FSx NetApp ONTAP file system for Multi-AZ deployment, you need to create a new file system with Multi-AZ deployment type.
Steps
- Navigate to the Amazon FSx console
- Choose 'Create file system'
- Select 'NetApp ONTAP' as the file system type
- In the 'Deployment type' section, select either 'Multi-AZ 1' or 'Multi-AZ 2'
- Configure other settings as needed
- Create the file system with Multi-AZ deployment
- Migrate your data from the single-AZ file system to the new Multi-AZ file system
- Update your applications to use the new Multi-AZ file system
- Delete the old single-AZ file system once migration is complete
Compliance
NIST 800-53