Ensure that your Amazon Relational Database Service (RDS) instances have Deletion Protection feature enabled in order to protect them from being accidentally deleted.
This rule can help you with the following compliance standards:
This rule resolution is part of the Cloud Conformity Security & Compliance tool for AWS
With Deletion Protection safety feature enabled, you have the guarantee that your Amazon RDS database instances cannot be accidentally deleted and make sure that your data remains safe. Deletion protection prevents any existing or new RDS database instances from being deleted by users via the AWS Management Console, the CLI or the API calls, unless the feature is explicitly disabled.
Note: Deletion protection for RDS instances is supported by all database engines, except Amazon Aurora where Deletion Protection feature is implemented at the cluster level, not instance level.
To determine if your Amazon RDS database instances are protected against accidental deletion, perform the following:
Remediation / Resolution
To enable Deletion Protection feature for your existing AWS RDS database instances, perform the following actions:
- AWS Documentation
- Amazon RDS FAQs
- Amazon RDS Now Provides Database Deletion Protection
- Deleting a DB Instance
- Deleting a DB Instance in a DB Cluster
- Modifying an Amazon RDS DB Instance and Using the Apply Immediately Parameter
Unlock the Remediation Steps
Gain free unlimited access
to our full Knowledge Base
Over 750 rules & best practices
You are auditing:
Instance Deletion Protection
Risk level: Medium