Drata inspected company's database snapshot history and determined a successful snapshot is available for the previous day.
Prerequisite
This test requires an additional permission:
backup:ListRecoveryPointsByResource.To add this permission to the DrataAutoPilot role to avoid permission errors.
Navigate to the DrataAutopilotRole in IAM Console.
Add an inline policy to the role.
In the policy editor, choose JSON to add permissions manually and paste the following JSON for the permission (backup:ListRecoveryPointsByResource) needed for this test:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"backup:ListRecoveryPointsByResource"
],
"Resource": "*"
}
]
}
Give this inline policy a name and add it to the DrataAutoPilot role.
ASSOCIATED DRATA CONTROL
This test is part of the Backup Monitoring control (DCF-99) that ensures automated notifications are sent to personnel in the event of a backup failure. Backup failures are investigated and resolved by engineering personnel following company policies and procedures.
WHAT TO DO IF A TEST FAILS
If Drata did not identify a successful snapshot for the previous day for the following databases, the test will fail. To remediate a failed test, you will need to investigate the reason for the backup failure and manually restart the backup job if necessary.