A config rule that checks whether RDS DB instances have backups enabled. Optionally, the rule checks the backup retention period and the backup window.

This config rule supports the following parameters:

  • backupRetentionPeriod
    • Required: No
    • Type: int
    • Description:Retention period for backups.
  • backupRetentionMinimum
    • Required: No
    • Type: int
    • Description:Minimum retention period for backups.
  • preferredBackupWindow
    • Required: No
    • Type: String
    • Description:Time range in which backups are created.
  • checkReadReplicas
    • Required: No
    • Type: boolean
    • Description:Checks whether RDS DB instances have backups enabled for read replicas.

CloudFormation Template

AWSTemplateFormatVersion: '2010-09-09'
Description: Check if RDS DB instances have backups enabled
Resources:
  ConfigRule:
    Type: 'AWS::Config::ConfigRule'
    Properties:
      ConfigRuleName: undefined
      Description: undefined
      Source:
        Owner: undefined
        SourceIdentifier: undefined
      Scope:
        ComplianceResourceTypes:
          - undefined