RDS instances should have automatic backups enabled

Ensures RDS DB instances keep automated backups for at least 7 days, so a point-in-time restore can reach back that far; a retention period of 0 turns them off. For an instance that belongs to a DB cluster the retention period is a cluster-level setting, so change it on the cluster, which RDS.50 checks.

service: RDS
severity: Medium
scope: evaluated in every region

How to fix it

In the console

RDS → Databases → the DB instance → Modify

With the AWS CLI

aws rds modify-db-instance --db-instance-identifier <db-instance-identifier> --backup-retention-period 7 --apply-immediately --region <region>

With Terraform

resource "aws_db_instance" "this" {
  instance_class          = var.instance_class
  backup_retention_period = 7
}

See which of your accounts this check is failing on.

Book a demo

RDS instances should have automatic backups enabled

How to fix it

In the console

With the AWS CLI

With Terraform

More RDS checks