diff --git a/postgres/cdk/lib/giant.ts b/postgres/cdk/lib/giant.ts
index ee05e550..9eeef4b5 100644
--- a/postgres/cdk/lib/giant.ts
+++ b/postgres/cdk/lib/giant.ts
@@ -4,7 +4,7 @@ import {
 } from '@guardian/cdk/lib/constructs/core';
 import { GuVpc, SubnetType } from '@guardian/cdk/lib/constructs/ec2/vpc';
 import type { App } from 'aws-cdk-lib';
-import { CfnOutput, Duration, SecretValue } from 'aws-cdk-lib';
+import { CfnOutput, Duration, SecretValue, Tags } from 'aws-cdk-lib';
 import {
 	InstanceClass,
 	InstanceSize,
@@ -78,6 +78,9 @@ export class Giant extends GuStack {
 			}),
 		});
 
+		// Enable nightly backups (via https://github.com/guardian/aws-backup)
+		Tags.of(database).add("devx-backup-enabled", "true");
+
 		const dbAccessSecurityGroup = new SecurityGroup(this, 'db-access', {
 			vpc: vpc,
 			allowAllOutbound: false,