Skip to content

AWS RDS instance without Automatic Backup setting

Description

This check examines the attribute backup_retention_period this should have a value 1-35, and checks if its set to 0 which would disable the backup. This check is currently under review and maybe suppressed in future releases.

Code Example

go
resource "aws_rds_cluster" "test" {
  ...
+ backup_retention_period = 35
}

Remediation

Terraform

  • Resource: aws_rds_cluster
  • Arguments: backup_retention_period

Rule Details

FieldValue
IDIAC-0183
SeverityLOW
IaC TypeTerraform
FrameworksTerraform, TerraformPlan
Checkov IDCKV_AWS_133

References