RDS backup retention for clusters defaults to 1 day, this may not be enough to recover from an accidental or malicious data loss.

Remediation

Increase the back retention to more than the default value. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster#backup_retention_period

Metadata

• Severity: informational
• Slug: rds-with-insufficient-backup-recovery

OWASP

• A05:2021: Security Misconfiguration