Databases in RDS is suddenly deleted (empty)

0

My databases in RDS was working normally but suddenly empty. The database was still there but all data inside is deleted.

I check the DB instance monitoring, event log and CloudTrail but still cannot find anything abnormal. Could you suggest what is the best practise and activity to be performed for do some investigation?

Here is sone instance configurations

  • Instance class: db.t2.micro (Free Tier Plan)
  • vCPU: 1
  • RAM: 1 GB
  • Multi-AZ: No
  • Encryption: Not enabled
  • Storage type: General Purpose SSD (gp2)
  • Storage: 5 GiB
  • Storage autoscaling: Disabled
louis
已提问 9 个月前657 查看次数
4 回答
0
已接受的回答

Hello.
Does it mean that the RDS instance is still there but all the data inside is gone?
RDS data is not deleted unless you manipulate it with SQL or other means.
If the query log is enabled, you will be able to see Delete and Drop operations from there.
https://repost.aws/knowledge-center/rds-postgresql-query-logging

RDS can also be restored from snapshots if RDS snapshots are still available.
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_RestoreFromSnapshot.html

profile picture
专家
已回答 9 个月前
profile picture
专家
已审核 9 个月前
profile pictureAWS
专家
已审核 9 个月前
  • Thank you for your answer.

    I turned on query logging for PostgreSQL and I can see the DROP statements log. It drops all tables and databases in the RDS Database instances It occurs about once a month.

    Does it relate to Free Tier Plan, the Instance Class or the RDS automatic tasks or something? (I'm using Burstable performance Instance Class)

  • AWS does not automatically delete your data even in the free tier. This means that it will not be removed unless your application or yourself queries it. By the way, is public access enabled for RDS? If public access is enabled, unauthorized access from outside may be the cause. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html#USER_VPC.Hiding
    First, identify who is executing the drop query.

0

you can check it by using logs , like general logs, error logs, audit logs. make sure to click on parameter group then your can see your rds parameter group and then search general,error, audit logs and change value to 1 and restart the DB. now go to RDS logs not cloudwatch logs and you can see it the logs. Now monitor and make sure to take backup according to your requirement.

Afshaar
已回答 9 个月前
0

Have you check the CloudWatch metrics to see what happend to your RDS?

profile picture
已回答 9 个月前
0

It happened to me as well, on RDS Postgres Database instance.

You can set the following to prevent the problem: i) Inbound rules for security group shouldn't open to anywhere, but to VPC or specific security group access, ii) Use strong password for default user, don't use the default password

已回答 5 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则

相关内容