Skip to main content

Remediation

Enable Copy Tags to Snapshot for an RDS Instance

To ensure that RDS snapshots inherit the same tags as their parent database instances, enable the Copy Tags to Snapshot setting. This ensures consistent cost allocation, security classification, and access control across both live databases and their backups.

From Command Line

Use the following AWS CLI command to enable tag propagation to snapshots for the specified RDS instance:

aws rds modify-db-instance \
--db-instance-identifier {{db-instance-id}} \
--copy-tags-to-snapshot \
--apply-immediately

Considerations

  • Enabling this setting does not affect existing snapshots; it applies only to snapshots created after the change.
  • The modification does not require downtime and can be applied immediately.