OpenParable
Skip to content
← Back to skills

Cis AWS Database 7.10

DevOps & Security
cis-aws-database-7.10

Cis AWS Database 7.10 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Ensure to Configure Backup Window

View on GitHub ↗
QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

  1. Open your project in Codex.
  2. Copy and paste the prompt below.
  3. Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/AWS/CIS_AWS_Database_Services_Benchmark_v2.0.0/cis-aws-database-7.10/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/cis-aws-database-7-10, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

7.10 Ensure to Configure Backup Window (Manual)

Description

Configure backup windows for Amazon DocumentDB clusters to ensure regular backups are performed during appropriate time periods, and validate backup and restore procedures.

Rationale

Properly configured backup windows ensure that backups are taken during off-peak hours to minimize performance impact, and regular testing of restore procedures validates data recoverability.

Impact

Properly configured backup windows minimize the impact on production workloads while ensuring data protection.

Audit Procedure

Using AWS Console

  1. Perform Manual Backups (Optional)

    • If desired, you can also create manual backups of your DocumentDB cluster.
    • In the cluster details page, navigate to the Backup section.
    • Click on the Create backup button.
    • Provide a name for the backup and confirm the action.

  2. Restore from Backups (Optional)

    • If a disaster occurs or you need to restore your DocumentDB cluster to a previous state, you can restore it from the available backups.
    • In the cluster details page, navigate to the Backup section.
    • Choose the backup from which you want to restore.
    • Follow the prompts and provide the necessary information to initiate the restore process.

  3. Test Backup and Restore Procedures

    • Periodically test the backup and restore procedures to ensure they work as expected.
    • Perform test restores on non-production environments to validate the integrity and completeness of the backup data.

  4. Regularly Monitor and Validate Backups

    • Regularly monitor the backup status and validate that the backups are completed successfully.
    • Monitor backup storage usage to ensure it is within the desired limits and plan for additional storage as needed.

Expected Result

Backup windows are configured during off-peak hours, manual backups can be created on demand, and restore procedures have been tested and validated.

Remediation

Using AWS Console

Follow the audit procedure steps to configure backup windows, perform manual backups, and test restore procedures for each DocumentDB cluster.

Default Value

Amazon DocumentDB configures an automatic backup window when the cluster is created. The default backup retention period is 1 day.

References

  1. https://aws.amazon.com/products/databases/

CIS Controls

Controls VersionControlIG 1IG 2IG 3
v811.1 Establish and Maintain a Data Recovery ProcessXXX
v710.2 Perform Complete System BackupsXXX

Profile

Level 1 | Manual