AWS Config Rule: DynamoDB Resources Protected by Backup Plan
DYNAMODB_RESOURCES_PROTECTED_BY_BACKUP_PLAN
Ryan Ware
Last Update 9 months ago
Description: Checks if Amazon DynamoDB tables are protected by a backup plan. The rule is NON_COMPLIANT if the DynamoDB Table is not covered by a backup plan.
Trigger type: Periodic
AWS Region: All supported AWS regions except China (Beijing), Asia Pacific (Jakarta), Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Osaka), Asia Pacific (Melbourne), AWS GovCloud (US-East), AWS GovCloud (US-West), Europe (Spain), China (Ningxia), Europe (Zurich) Region
How to Resolve Manually
This Config Rule will only check your DynamoDB Resources with a particular tag- in this case by default we search for resources with the Tag Key "Environment" and Tag Value "Production". This of course can be changed if desired in the StackZone Console when enabling this rule. Any DynamoDB Resource without the chosen tag key and value will be ignored by this particular Config Rule. This rule will be marked as non-compliant if any properly tagged resource is found not being part of an AWS backup plan.
To resolve this, you need to include all the non-compliant file systems found by the rule in a Backup Plan. To create the backup plan go to AWS Backup service within AWS Console.
Once there, locate and click on Backup plans in the left menu then click on Create backup plan button. You should select the options based on your needs, although we recommend you to select a pre-built template, and indicate a plan name. Use the following picture as reference:
You will also need to add a backup rule according to your organization needs. Once those settings are defined, click on Create plan button.
In the next screen, you will be prompted to assign resources to the plan, this means indicate the DynamoDB Table you want to be covered by the plan.
To do this, define a name for the resource assignment and pick the file systems you want. You can select specific resources or add all of them at once. Check the following screenshot as an example:
After completing this last step, your DynamoDB Resources will be part of a Backup plan and AWS Backup will generate Snapshots according to your Backup rule configuration.
How to Resolve with StackZone
The StackZone AWS Backup feature helps you automate schedules backups of your EC2 Instances, EBS Volumes, RDS Instances and DynamoDB tables. All you need to do is tag your AWS resource with "daily", "weekly" or "monthly" schedule and the AWS Backup feature will ensure a backup of your AWS resource is taken depending on your chosen period.
Check out this feature article and learn how to backup any DynamoDB table with just a tag.
Want to know more about StackZone and how to make your cloud management simple and secure?
Check our how it works section with easy to follow videos or just create your own StackZone Account here
