RDS with Insufficient Backup Recovery
RDS backup retention for clusters defaults to 1 day, this may not be enough to recover from an accidental or malicious data loss.
Remediation
Increase the back retention to more than the default value. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster#backup_retention_period
Metadata
- Severity: informational
- Slug: rds-with-insufficient-backup-recovery
OWASP
- A05:2021: Security Misconfiguration
