Prerequisite
This test requires an additional permissions:
backup:ListBackupJobs.To add this permission to the DrataAutopilotRole to avoid permission errors.
Navigate to the DrataAutopilotRole in IAM Console.
Add an inline policy to the role.
In the policy editor, choose JSON to add permissions manually and paste the following JSON for the permission (backup:ListBackupJobs) needed for this test:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"backup:ListBackupJobs"
],
"Resource": "*"
}
]
}Give this inline policy a name and add it to the DrataAutopilotRole
ASSOCIATED DRATA CONTROL
This test is part of the Backup Monitoring control (DCF-99) that ensures automated notifications are sent to personnel in the event of a backup failure. Backup failures are investigated and resolved by engineering personnel following company policies and procedures.
WHAT TO DO IF A TEST FAILS
If Drata did not find any alerts configured to notify personnel when a backup fails, the test will fail. To remediate a failed test, you will need to set up alerts to notify the appropriate personnel when a backup failure occurs.