RDS DB cluster backup retention period is 0, outside the 1-35 day range

What it checks

RDS DB cluster backup retention period is 0, outside the 1-35 day range

Where it applies

Terraform: aws_rds_cluster

CloudFormation: AWS::RDS::DBCluster

How to fix it

1. Set backup_retention_period to at least 7 (days). On an existing cluster the retention change may be deferred to the next maintenance window unless apply_immediately = true (the provider default is false). Changing the retention period causes no downtime, but apply_immediately also applies any pending modifications at the same time, and a pending modification that needs downtime then causes it.

Frameworks

• SOC 2 A1.2

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules