# Source: https://docs.datadoghq.com/security/default_rules/def-000-u37.md

---
title: RDS instances should have automatic backups enabled
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > RDS instances should have automatic
  backups enabled
---

# RDS instances should have automatic backups enabled
 
## Description{% #description %}

This control checks that RDS instances have automated backups enabled and maintains a backup for at least 7 days. Read replicas are excluded from this evaluation. The control will fail if backups are not enabled for the instance or if the retention period is shorter than the specified time frame. Automated backups enhance recovery speed after a security incident and bolster system resilience. Amazon RDS allows you to configure daily full instance volume snapshots. For more information about Amazon RDS automated backups, refer to the [Working with Backups section in the Amazon RDS User Guide](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html).

## Remediation{% #remediation %}

To enable automated backups on RDS instances, see [Enabling automated backups in the Amazon RDS User Guide](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html#USER_WorkingWithAutomatedBackups.Enabling).