Question

A financial services company uses AWS Backup to protect its RDS databases, EBS volumes, and EFS file systems across multiple accounts. Auditors require documented proof that backups can actually be restored within the defined 4-hour RTO. The CloudOps team currently performs manual restores quarterly, but this is time-consuming and inconsistent. Which approach provides an automated, repeatable way to validate that backups are recoverable and meet RTO expectations?

Accepted Answer

Enable AWS Backup restore testing plans that automatically run scheduled restore jobs on selected recovery points and validate completion

Answer

Enable AWS Backup Vault Lock in compliance mode to guarantee that recovery points cannot be altered before restore

Answer

Configure cross-Region copy of all recovery points and rely on the copy job success status as proof of recoverability

Answer

Create an EventBridge rule that alerts when a backup job completes successfully and log the notification for auditors