Class WaDatabaseInstanceFromSnapshot

Well Architected database instance.

Default Configuration

Allocated Storage: 100 GB Backup Retention: 35 days Log Retention: 7 years Max Storage Autoscaling: 10000 GB Removal Policy: Retain Monitoring Interval: 60 sec

Default Alarms

1. Free storage space alerts

   • Risk Level: High
   • Well Architected Pillar: Reliability

2. CPU Utilization alert

   • Risk Level: High
   • Well Architected Pillar: Reliability, Performance, Operational Excellence

Note that the default alarm uses the WaAlarm construct, which sets up an alarm action to notify the SNS Topic AlarmEventsTopic by default.

Examples

Default Usage

```ts

• new WaDatabaseInstanceFromSnapshot(this, "LogicalId", {});
• ```

Custom Configuration

```ts

• new WaDatabaseInstanceFromSnapshot(this, "LogicalId", {
• allocatedStorage: 100
• });
• ```

Compliance

It addresses the following compliance requirements

1. Databases are protected from accidental deletion in production

   • Risk Level: Medium
   • Compliance: NIST4
   • Well Architected Pillar: Operational Excellence

2. Auto minor version updates

   • Risk Level: Medium
   • Compliance: APRA, MAS, NIST4
   • Well Architected Pillar: Operational Excellence

3. Copy tags to snapshots

   • Risk Level: High
   • Compliance: NA
   • Well Architected Pillar: Operational Excellence

4. Instance storage autoscaling

   • Risk Level: High
   • Compliance: NA
   • Well Architected Pillar: Performance, Reliability

5. Encrypted snapshots

   • Risk Level: Medium
   • Compliance: APRA, MAS
   • Well Architected Pillar: Security

6. Performance insights

   • Risk Level: Low
   • Compliance: NA
   • Well Architected Pillar: Reliability, Performance, Operational Excellence

7. Auto minor version update

   • Risk Level: Medium
   • Compliance: APRA, MAS, NIST4
   • Well Architected Pillar: Security

8. Auto backup

   • Risk Level: High
   • Compliance: NIST4
   • Well Architected Pillar: Reliability

9. Do not user default ports

   • Risk Level: Low
   • Compliance: PCI, APRA, NIST4
   • Well Architected Pillar: Security

10. Storage encryption enabled

    • Risk Level: High
    • Compliance: PCI, HIPAA, GDPR, ARPA, MAS, NIST4
    • Well Architected Pillar: Security

11. Instance not publicly available

    • Risk Level: High
    • Compliance: PCI, HIPAA, GDPR, ARPA, MAS, NIST4
    • Well Architected Pillar: Security

12. Backup retention period

    • Risk Level: Medium
    • Compliance: NIST4
    • Well Architected Pillar: Reliability

13. Use general purpose SSD

    • Risk Level: Low
    • Compliance: NA
    • Well Architected Pillar: Cost Optimization

14. Use MultiAZ

    • Risk Level: Medium
    • Compliance: NIST4
    • Well Architected Pillar: Reliability