Medium
RDS
Regional
Amazon Aurora clusters should have backtracking enabled
NIST
Description
Checks if Amazon Aurora clusters have backtracking enabled. This check also fetches the tags associated with each RDS cluster.
Remediation
To enable backtracking for Amazon Aurora clusters, follow these steps:
Steps
- Sign in to the AWS Management Console and open the Amazon RDS console.
- In the navigation pane, choose 'Databases'.
- Select the Aurora DB cluster for which you want to enable backtracking.
- Choose 'Modify'.
- In the 'DB Cluster Backtrack' section, select 'Enable Backtrack'.
- Specify the 'Backtrack Window'. This is the amount of time, in seconds, that you want to be able to backtrack the DB cluster.
- Choose 'Continue' and then 'Modify DB Cluster' on the summary page.
- Monitor the modification status. The cluster status changes to 'modifying' during the process and back to 'available' when the modification is complete.
- After enabling backtracking, test it to ensure it functions as expected.
Compliance
NIST