Neptune DB clusters should have automated backups enabled
Description
This control checks whether a Neptune DB cluster has automated backups enabled, and a backup retention period greater than or equal to the specified time frame. The control fails if backups aren't enabled for the Neptune DB cluster, or if the retention period is less than the specified time frame. Unless you provide a custom parameter value for the backup retention period, Security Hub uses a default value of 7 days. Backups help you recover more quickly from a security incident and strengthen the resilience of your systems. By automating backups for Neptune DB clusters, you can ensure data is protected and can be restored when needed.
Remediation
To remediate Neptune DB clusters without automated backups enabled, you need to enable automated backups and set an appropriate retention period.
Steps
- Navigate to the Amazon Neptune console
- Select the DB cluster that needs remediation
- Click on 'Modify' to edit the cluster configuration
- In the 'Backup' section, ensure 'Automated backups' is enabled
- Set the 'Backup retention period' to at least 7 days (or your organization's required minimum)
- Configure the backup window if needed
- Review the backup configuration settings
- Apply the changes during the next maintenance window or immediately
- Verify that automated backups are enabled and retention period is set
- Test backup functionality to ensure it's working properly