diff --git a/README.md b/README.md index 3085c8b..f27b480 100644 --- a/README.md +++ b/README.md @@ -83,6 +83,8 @@ These modules will deploy a number of AWS resources: Note that there are always two vaults. In most restoration cases you should only need the `source` vault, so there is no need to copy data from the second, `destination`, vault. The latter is only used in the case of a disaster recovery scenario where the source account is compromised beyond use. As such the recovery time and recovery point objectives you will care about for situations in which the second vault is used should take this into account. +Restore testing is configured separately from backup schedules. The source module defaults to annual restore testing. If your operational needs require it, you can override the restore testing schedule to run monthly instead. + ## Developer Guide This document will guide you through the set-up and deployment of the AWS Backup solution in a typical project. You will need: diff --git a/modules/aws-backup-source/README.md b/modules/aws-backup-source/README.md index 6129c28..d99611a 100644 --- a/modules/aws-backup-source/README.md +++ b/modules/aws-backup-source/README.md @@ -90,7 +90,7 @@ No modules. | [reports\_bucket](#input\_reports\_bucket) | Bucket to drop backup reports into | `string` | n/a | yes | | [restore\_testing\_plan\_algorithm](#input\_restore\_testing\_plan\_algorithm) | Algorithm of the Recovery Selection Point | `string` | `"LATEST_WITHIN_WINDOW"` | no | | [restore\_testing\_plan\_recovery\_point\_types](#input\_restore\_testing\_plan\_recovery\_point\_types) | Recovery Point Types | `list(string)` |
[
"SNAPSHOT"
]
| no | -| [restore\_testing\_plan\_scheduled\_expression](#input\_restore\_testing\_plan\_scheduled\_expression) | Scheduled Expression of Recovery Selection Point | `string` | `"cron(0 1 ? * SUN *)"` | no | +| [restore\_testing\_plan\_scheduled\_expression](#input\_restore\_testing\_plan\_scheduled\_expression) | Scheduled Expression of Recovery Selection Point. Annual testing is the minimum cadence; monthly testing is optional. | `string` | `"cron(0 1 15 1 ? *)"` | no | | [restore\_testing\_plan\_selection\_window\_days](#input\_restore\_testing\_plan\_selection\_window\_days) | Selection window days | `number` | `7` | no | | [restore\_testing\_plan\_start\_window](#input\_restore\_testing\_plan\_start\_window) | Start window from the scheduled time during which the test should start | `number` | `1` | no | | [terraform\_role\_arn](#input\_terraform\_role\_arn) | ARN of Terraform role used to deploy to account | `string` | n/a | yes | diff --git a/modules/aws-backup-source/variables.tf b/modules/aws-backup-source/variables.tf index c2d0d88..d6674f7 100644 --- a/modules/aws-backup-source/variables.tf +++ b/modules/aws-backup-source/variables.tf @@ -58,7 +58,7 @@ variable "restore_testing_plan_start_window" { variable "restore_testing_plan_scheduled_expression" { description = "Scheduled Expression of Recovery Selection Point" type = string - default = "cron(0 1 ? * SUN *)" + default = "cron(0 1 15 1 ? *)" } variable "restore_testing_plan_recovery_point_types" {