What you need to know
A database recovery timestamp must be inside the reported backup window, not simply equal to the current clock.
Potentially affected
This describes RDS DB-instance recovery. Aurora clusters and engine-specific exceptions have separate requirements. The page does not guarantee that a chosen timestamp or restored instance meets application acceptance criteria.
DSE recommendation
DSE recommends recording the earliest and latest restorable timestamps together with the incident’s time reference before starting recovery.
A database recovery timestamp must be inside the reported backup window, not simply equal to the current clock.
Source facts
Amazon RDS point-in-time recovery creates a new DB instance without modifying the source. RDS uploads instance transaction logs to S3 every five minutes and exposes LatestRestorableTime. Recovery can target a time within the backup retention period. Restored instances initially use default parameter and option groups unless custom groups are supplied through the supported restore workflow.
Source: AWS — Restoring a DB instance to a specified time for Amazon RDS.
Applicability
This describes RDS DB-instance recovery. Aurora clusters and engine-specific exceptions have separate requirements. The page does not guarantee that a chosen timestamp or restored instance meets application acceptance criteria.
DSE recommendation
DSE recommends recording the earliest and latest restorable timestamps together with the incident’s time reference before starting recovery. Choose a unique target identifier and review network, parameter and option settings as an explicit recovery configuration. Keep the source isolated from the recovery decision until data checks establish the intended outcome. Plan the application endpoint change and the treatment of writes made after the selected recovery time. Put the selected recovery timestamp and endpoint cutover decision in separate approval fields. Ask the application owner which transaction examples will establish the intended data boundary, then retain those checks with the restored instance configuration for a later repeatable recovery exercise.
Verification
Proposed verification: restore an authorized test database to a timestamp inside the reported range. Compare known records on both sides of that time, inspect the target configuration, and exercise the intended client connection. Retain the source and target identifiers, timestamps and application checks without presenting the restore request itself as proof of recovery.
Official reference
AWS — Restoring a DB instance to a specified time for Amazon RDS. Reviewed October 20, 2026.
Review the official source
AWS — Restoring a DB instance to a specified time for Amazon RDS · Verified October 20, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE