SQL database instances should have automated backups enabled

문서 > Datadog 보안 > OOTB Rules > SQL database instances should have automated backups enabled

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Description

All SQL database instances should have automated backups enabled.

Rationale

Backups provide a way to restore a Cloud SQL instance, to recover lost data, or to recover from a problem with that instance. Enable automated backups for any instance that contains data that should be protected from loss or damage. This recommendation is applicable for SQL Server, PostgreSql, MySql generation 1 and MySql generation 2 instances.

Impact

Automated backups increase the required storage size and may affect the costs associated with it.

Remediation

From the console

Go to the Cloud SQL Instances page in the Google Cloud Console: https://console.cloud.google.com/sql/instances
Select the instance where the backups need to be configured.
Click Edit.
In the Backups section, check ‘Enable automated backups’, and choose a backup window.
Click Save.

From the command line

List all Cloud SQL database instances using the following command:
```
gcloud sql instances list
```

Enable automated backups for a Cloud SQL database instance by running:

gcloud sql instances patch <INSTANCE_NAME> --backup-start-time <[HH:MM]>

The backup-start-time parameter is specified in 24-hour time, in the UTC±00 time zone, and specifies the start of a 4-hour backup window. Backups can start any time during the backup window.

Default value

By default, automated backups are not configured for Cloud SQL instances. Data backup is not possible on any Cloud SQL instance unless Automated Backup is configured.

References

CIS controls

Version 8: 11.2 Perform Automated Backups. Perform automated backups of in-scope enterprise assets. Run backups weekly, or more frequently, based on the sensitivity of the data.