AWS Backup plan should include cross-region copy for DR

What it checks

AWS Backup plan: no cross-region copy action is configured.

Where it applies

Terraform: aws_backup_plan

CloudFormation: AWS::Backup::BackupPlan

How to fix it

1. Add a copy_action block to the backup rule pointing to a vault in your DR region.

Frameworks

• SOC 2 CC7.4
• HIPAA 164.312(c)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules