LOW

Ensure backup plans use resource tagging for selective backup

Tag-based backup selection enables flexible and automated backup assignment as resources are created with appropriate tags.

Security Impact

Manual resource selection is error-prone and doesn't automatically cover new resources.

How to Remediate

Use tag-based resource selection in backup plans. Establish tagging standards for backup requirements (e.g., Backup=Daily).

Affected Resources

AWS::Backup::BackupSelection

Compliance Frameworks

Operational Excellence

How TigerGate Helps

TigerGate continuously monitors your AWS environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all AWS Backup resources across your AWS accounts every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for Operational Excellence compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
aws-backup-9
Service
AWS Backup
Category
Backup Management
Severity
LOW

Automate This Check

TigerGate automatically scans your AWS environment for this and 575+ other security checks.

Start Free Trial

Related AWS Backup Checks

View all checks
aws-backup-1high

Ensure AWS Backup has backup plans configured for critical resources

aws-backup-2high

Ensure backup vaults have encryption enabled

aws-backup-3medium

Ensure backup vaults have access policies configured

aws-backup-4medium

Ensure backup plans have sufficient retention periods

aws-backup-5high

Ensure backup plans include cross-region copy for disaster recovery