logo

Database

Aws Automated Backups Disabled

Description

Detects Amazon RDS database instances that have automated backups disabled. Automated backups are a critical disaster recovery feature, and disabling them puts data at risk of permanent loss in case of accidental deletion or corruption.

Weakness:

256 - Lack of protection against deletion - RDS

Category: Functionality Abuse

Detection Strategy

    Retrieves configuration details for all RDS database instances in the specified AWS region

    Checks if any RDS instance has BackupRetentionPeriod set to 0 (disabled backups)

    Reports a vulnerability for each RDS instance where automated backups are disabled