From 0df872a11db7ba4b508ffca67332f8a92138fb51 Mon Sep 17 00:00:00 2001 From: Chris Walters Date: Wed, 5 Aug 2026 16:11:15 +0100 Subject: [PATCH] updating default restore testing period to annual, default is specified to 15th Jan --- README.md | 2 ++ modules/aws-backup-source/README.md | 2 +- modules/aws-backup-source/variables.tf | 2 +- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 3085c8b..f27b480 100644 --- a/README.md +++ b/README.md @@ -83,6 +83,8 @@ These modules will deploy a number of AWS resources: Note that there are always two vaults. In most restoration cases you should only need the `source` vault, so there is no need to copy data from the second, `destination`, vault. The latter is only used in the case of a disaster recovery scenario where the source account is compromised beyond use. As such the recovery time and recovery point objectives you will care about for situations in which the second vault is used should take this into account. +Restore testing is configured separately from backup schedules. The source module defaults to annual restore testing. If your operational needs require it, you can override the restore testing schedule to run monthly instead. + ## Developer Guide This document will guide you through the set-up and deployment of the AWS Backup solution in a typical project. You will need: diff --git a/modules/aws-backup-source/README.md b/modules/aws-backup-source/README.md index 6129c28..d99611a 100644 --- a/modules/aws-backup-source/README.md +++ b/modules/aws-backup-source/README.md @@ -90,7 +90,7 @@ No modules. | [reports\_bucket](#input\_reports\_bucket) | Bucket to drop backup reports into | `string` | n/a | yes | | [restore\_testing\_plan\_algorithm](#input\_restore\_testing\_plan\_algorithm) | Algorithm of the Recovery Selection Point | `string` | `"LATEST_WITHIN_WINDOW"` | no | | [restore\_testing\_plan\_recovery\_point\_types](#input\_restore\_testing\_plan\_recovery\_point\_types) | Recovery Point Types | `list(string)` | 
[
  "SNAPSHOT"
]
| no | -| [restore\_testing\_plan\_scheduled\_expression](#input\_restore\_testing\_plan\_scheduled\_expression) | Scheduled Expression of Recovery Selection Point | `string` | `"cron(0 1 ? * SUN *)"` | no | +| [restore\_testing\_plan\_scheduled\_expression](#input\_restore\_testing\_plan\_scheduled\_expression) | Scheduled Expression of Recovery Selection Point. Annual testing is the minimum cadence; monthly testing is optional. | `string` | `"cron(0 1 15 1 ? *)"` | no | | [restore\_testing\_plan\_selection\_window\_days](#input\_restore\_testing\_plan\_selection\_window\_days) | Selection window days | `number` | `7` | no | | [restore\_testing\_plan\_start\_window](#input\_restore\_testing\_plan\_start\_window) | Start window from the scheduled time during which the test should start | `number` | `1` | no | | [terraform\_role\_arn](#input\_terraform\_role\_arn) | ARN of Terraform role used to deploy to account | `string` | n/a | yes | diff --git a/modules/aws-backup-source/variables.tf b/modules/aws-backup-source/variables.tf index c2d0d88..d6674f7 100644 --- a/modules/aws-backup-source/variables.tf +++ b/modules/aws-backup-source/variables.tf @@ -58,7 +58,7 @@ variable "restore_testing_plan_start_window" { variable "restore_testing_plan_scheduled_expression" { description = "Scheduled Expression of Recovery Selection Point" type = string - default = "cron(0 1 ? * SUN *)" + default = "cron(0 1 15 1 ? *)" } variable "restore_testing_plan_recovery_point_types" {