🛡️ AWS DMS Replication Instance Multi-AZ Deployment is not enabled🟢

• Contextual name: 🛡️ Replication Instance Multi-AZ Deployment is not enabled🟢
• ID: /ce/ca/aws/dms/replication-instance-multi-az
• Tags:
  • 🟢 Policy with categories
  • 🟢 Policy with type
  • 🟢 Production policy
• Policy Type: COMPLIANCE_POLICY
• Policy Categories: RELIABILITY

Logic

• 🧠 prod.logic.yaml🟢
  • 📗 AWS DMS Replication Instance
  • 🔌 AWS DMS Replication Instance - object.extracts.yaml
  • 🧪 test-data.json

Similar Policies

• AWS Security Hub: [DMS.13] DMS replication instances should be configured to use multiple Availability Zones

Description

Open File

Description

This policy identifies AWS DMS Replication Instances that are not configured for Multi-AZ deployment.

Rationale

A DMS replication instance is the compute layer that runs migration and replication tasks between source and target systems. When the instance is deployed in a single Availability Zone, a zonal disruption can interrupt replication, delay cutover activities, and extend recovery time for data migration workloads.

Enabling Multi-AZ deployment allows AWS to maintain a standby replication instance in a different Availability Zone and fail over during infrastructure events. This improves service resilience and reduces the risk of prolonged migration interruptions for business-critical workloads.

Impact

Enabling Multi-AZ deployment increases cost because AWS provisions standby capacity in a second Availability Zone. Applying the change can also trigger a modification event for the replication instance, so it should be scheduled during an approved maintenance window or a period of low migration activity.

... see more

Remediation

Open File

Remediation

Enable Multi-AZ Deployment

Enable Multi-AZ deployment for the affected DMS replication instance.

From Command Line

Run the following command to enable Multi-AZ deployment:

aws dms modify-replication-instance \
    --replication-instance-arn {{replication-instance-arn}} \
    --multi-az \
    --apply-immediately

Confirm that the replication instance reports MultiAZ as true after the modification completes.

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [DMS.13] DMS replication instances should be configured to use multiple Availability Zones			1		no data
💼 Cloudaware Framework → 💼 System Configuration			58		no data