Neptune DB clusters should have automated backups enabled
Checks that a Neptune DB cluster keeps automated backups for at least 7 days. Retention sets how far back a point-in-time restore can reach, so a short window limits how long corruption or a bad write can go unnoticed and still be undone.
- service
- Neptune
- severity
- Medium
- scope
- evaluated in every region
How to fix it
- Affects another check: RDS.50 reads the same retention period on this cluster at the same 7-day floor, so raising it here clears that finding too.
In the console
Neptune → Databases → the DB cluster → Actions → Modify
- Backup retention period
- 7 to 35 days: as far back as you would realistically need to restore
With the AWS CLI
aws neptune modify-db-cluster --db-cluster-identifier <db-cluster-identifier> --backup-retention-period 7 --region <region>With Terraform
resource "aws_neptune_cluster" "this" {
cluster_identifier = var.cluster_identifier
backup_retention_period = 7
}
See which of your accounts this check is failing on.
Book a live scan