Merge pull request #1077 from NHSDigital/feature/kabo5-NRL-1581-enable-immutable-backups-prod

NRL-1581 enable prod backup and adjust plan for prod

Author: katebobyn-nhs

terraform/account-wide-infrastructure/prod/aws-backup.tf

@@ -128,12 +128,12 @@ module "source" {
     "rules" : [
       {
         "copy_action" : [{
-          "delete_after" : 4,
+          "delete_after" : 30,
         }],
         "lifecycle" : {
           "delete_after" : 2
         },
-        "name" : "daily_kept_for_2_days",
+        "name" : "daily_kept_for_30",
         "schedule" : "cron(0 0 * * ? *)"
       }
     ],
@@ -150,7 +150,7 @@ module "source" {
         "name" : "daily",
         "schedule" : "cron(0 0 * * ? *)",
         "copy_action" : [{
-          "delete_after" : 4,
+          "delete_after" : 28,
         }],
 
         "lifecycle" : {
@@ -161,8 +161,8 @@ module "source" {
         "name" : "monthly"
         "schedule" : "cron(30 0 ? * 4#1)" # first Thursday each month from 00:30
         "copy_action" : [{
-          "cold_storage_after" : 3,
-          "delete_after" : 100 # ensures there will always be min 3
+          "cold_storage_after" : 35,
+          "delete_after" : 400 # ensures 1 from previous restore test
         }],
         "lifecycle" : {
           "delete_after" : 2

terraform/account-wide-infrastructure/prod/dynamodb__pointers-table.tf

@@ -4,4 +4,5 @@ module "prod-pointers-table" {
   enable_deletion_protection  = true
   enable_pitr                 = true
   kms_deletion_window_in_days = 30
+  enable_backups              = true
 }

terraform/account-wide-infrastructure/prod/s3.tf

@@ -1,10 +1,12 @@
 module "prod-permissions-store-bucket" {
-  source      = "../modules/permissions-store-bucket"
-  name_prefix = "nhsd-nrlf--prod"
+  source         = "../modules/permissions-store-bucket"
+  name_prefix    = "nhsd-nrlf--prod"
+  enable_backups = true
 }
 
 module "prod-truststore-bucket" {
   source                  = "../modules/truststore-bucket"
   name_prefix             = "nhsd-nrlf--prod"
   server_certificate_file = "../../../truststore/server/prod.pem"
+  enable_backups          = true
 }