09 - Redshift Cluster Snapshot Retention

Ensure your Redshift clusters automatic snapshots are retained for at least 7 days

Ensure that your redshift clusters automatic backup retention is set for at least 7 days in order to be able to restore data in case of a data loss issue. This is considered a security best practice and should always be done. Ensuring this is enabled will help with PCI-DSS, NIST, and HIPPA compliance.

Audit & Remediation

Login into your AWS account
Navigate to the Redshift service at: https://console.aws.amazon.com/redshiftv2
On the left hand panel select Clusters.

Select the Cluster hyperlink for the database cluster you would like to check.
Under Backup scroll down to Backup details and look under Snapshot retention period to see if this is set to anything less than Automated (7 days).
If Snapshot retention period is currently set to less than Automated (7 days) then select the Edit button.

Under Backup change the Snapshot retention to at least 7 days.
Press the Modify cluster button in order to save your changes.

Repeat the outlined steps for each Redshift cluster you may have

See all of your AWS Redshift Clusters in a single place!

Do you want to see all Redshift Clusters in once place for all regions and all accounts?
Login to our online demo to see exactly what this looks like.
demo.intelligentdiscovery.io

Other Key Features

Inventory

Consolidate your inventory management with consistent and frequent security logs, inventories, and change logs. Dashboard reporting for extensive analytical value.

learn more +

Cost & Usage

Access consolidated capacity, cost, and volume tools in a scaling environment without impacting production or breaking the bank.