logo

Database

Aws Cluster Backup Retention

Description

Detects AWS RDS clusters with insufficient backup retention periods that could lead to data loss. RDS clusters should maintain backups for at least 7 days to ensure adequate disaster recovery capabilities and protect against data corruption or accidental deletion.

Weakness:

101 - Lack of protection against deletion

Category: Functionality Abuse

Detection Strategy

    Scans all RDS clusters in the specified AWS region

    Checks if the BackupRetentionPeriod configuration is less than 7 days

    Reports a vulnerability if any cluster's backup retention period is insufficient

    Each vulnerability includes the cluster ARN and actual retention period value