Drata inspected company's infrastructure configuration and confirmed that failed backups were resolved in a timely manner.
Prerequisite
This test requires an additional permissions:
backup:ListBackupJobs.To add this permission to the DrataAutoPilot role to avoid permission errors:
Navigate to the DrataAutopilotRole in IAM Console.
Add an inline policy to the role.
In the policy editor, choose JSON to add permissions manually and paste the following JSON for the permission (backup:ListBackupJobs) needed for this test:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"backup:ListBackupJobs",
],
"Resource": "*"
}
]
}Give this inline policy a name and add it to the DrataAutoPilot role
ASSOCIATED DRATA CONTROL
This test is part of the Backup Monitoring control (DCF-99) that ensures automated notifications are sent to personnel in the event of a backup failure. Backup failures are investigated and resolved by engineering personnel following company policies and procedures.
WHAT TO DO IF A TEST FAILS
If Drata identified a failed backup that was not restarted within 24 hours, the test will fail. To remediate a failed test, you will need to ensure that all backup failures are restarted within 24 hours.