Amazon RDS and Aurora 

Amazon RDS (Relational Database Service) is a managed AWS service that simplifies setting up, operating, and scaling relational databases in the cloud. It supports various engines like MySQL and PostgreSQL. Amazon Aurora is a high-performance, cloud-native relational database, built specifically for the cloud and offered as part of RDS. It provides enhanced scalability, durability, and performance compared to traditional databases. 

The AWS Shared Responsibility Model states that AWS is responsible for the security and reliability of their servers and infrastructure, whereas the customer is responsible for the security and reliability of their data and applications, including access control. This means the customer is responsible for being able to restore data in case of an overwrite or deletion, whether from human error or security breach. 

Even with AWS’s built-in RDS capabilities, your critical data in Amazon RDS and Aurora remains vulnerable. Accidental deletions, ransomware, or misconfigurations can lead to costly data loss. AWS automated backups have limitations in retention (35 days) and scope. Relying solely on snapshots for numerous instances across accounts becomes complex, costly, and lacks enterprise-grade features like air-gapping, immutability, and unified compliance  support needed for business resilience.

Clumio provides multi-layered backup security. Your data is air-gapped and immutable, helping prevent deletion or alteration. It’s encrypted in transit and at rest with FIPS 140-2 validation and optional BYOK. Plus, you can apply role-based access control and multi-factor authentication, robustly protecting your critical data. 

• Security & Compliance: You can review our compliance certifications at the Commvault Trust Center: https://trust.commvault.com/ 
• Authentication and Access: Clumio supports Multi-Factor Authentication (MFA) and Single Sign-On (SSO) via SAML 2.0. 
  Learn more about Authentication: https://documentation.commvault.com/clumio/authentication.html 
  Learn more about MFA: https://documentation.commvault.com/clumio/authentication.html#multi-factor-authentication-mfa 
  Learn more about SSO: https://documentation.commvault.com/clumio/authentication.html#single-sign-on-sso 

For database backups with long-term retention requirements, Clumio offers weekly air-gapped, immutable backups that are queryable for easy record retrieval during audits. Compliance reporting is included. You can enable these capabilities on existing snapshots in AWS by converting them to Clumio backups.

Considerations: 

• Minimum 1 year retention 
• Weekly or monthly backup frequency 
• Record-level retrieval

For resilience against ransomware and cyber incidents, Clumio takes automated air-gapped, immutable incremental backups of your RDS databases. Clumio provides customizable compliance reporting that helps simplify the audit process. 

Considerations: 

• Backup frequencies: Hourly, daily, weekly, monthly, yearly

Clumio allows you to manage and orchestrate your in-account RDS automated backups for near-term resilience against accidental deletions and corruption. 

Considerations: 

• Snapshots remain in AWS; storage fees may apply 

Getting Started Documentation: 

• Getting Started with Clumio Protect for Amazon RDS: https://documentation.commvault.com/clumio/get_started_with_clumio_protect_for_aws_rds.html
• Required Permissions: https://documentation.commvault.com/clumio/permissions_file_details.html
• Deploy via CloudFormation or Terraform: https://documentation.commvault.com/clumio/account_connection.html
• REST API Documentation: https://api.commvault.com/