Homepage

Ensure Amazon FSx Lustre retention backup period is set to 15 days Affecting FSx service in AWS

Severity

0.0
medium
0
10
Severity Framework
Snyk CCSS
Rule category
Data/ Backup

Is your environment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
Frameworks
  • Snyk IDSNYK-CC-00729
  • creditSnyk Research Team
Report a new misconfiguration Found a mistake?

Description

Insufficient retention backup period for Amazon FSx Lustre file system can result in data loss or unavailability of backups. It is recommended to set the retention backup period to 15 days to ensure data availability and recovery in case of failures or accidental deletions.

How to fix?

Set the automatic_backup_retention_days attribute in aws_fsx_lustre_file_system resource to at least 15 days.

Example Configuration

data "aws_subnet" "selected" {
  filter {
    name   = "tag:Name"
    values = ["aws-controltower-PrivateSubnet3A"]
  }
}

resource "aws_fsx_lustre_file_system" "valid-fsx-1" {
  subnet_ids                      = [data.aws_subnet.selected.id]
  automatic_backup_retention_days = 15
  storage_capacity                = 1200
  deployment_type                 = "PERSISTENT_1"
  per_unit_storage_throughput     = 50
}

resource "aws_fsx_lustre_file_system" "valid-fsx-2" {
  subnet_ids                      = [data.aws_subnet.selected.id]
  automatic_backup_retention_days = 30
  storage_capacity                = 1200
  deployment_type                 = "PERSISTENT_1"
  per_unit_storage_throughput     = 50
}