Ensure that your Amazon Relational Database Service (RDS) instances have Deletion Protection feature enabled in order to protect them from being accidentally deleted.
This rule can help you with the following compliance standards:
- NIST4
For further details on compliance standards supported by Conformity, see here.
This rule resolution is part of the Conformity Security & Compliance tool for AWS.
With Deletion Protection safety feature enabled, you have the guarantee that your Amazon RDS database instances cannot be accidentally deleted and make sure that your data remains safe. Deletion protection prevents any existing or new RDS database instances from being deleted by users via the AWS Management Console, the CLI or the API calls, unless the feature is explicitly disabled.
Note: Deletion protection for RDS instances is supported by all database engines, except Amazon Aurora where Deletion Protection feature is implemented at the cluster level, not instance level.
Audit
To determine if your Amazon RDS database instances are protected against accidental deletion, perform the following:
Remediation / Resolution
To enable Deletion Protection feature for your existing AWS RDS database instances, perform the following actions:
References
- AWS Documentation
- Amazon RDS FAQs
- Amazon RDS Now Provides Database Deletion Protection
- Deleting a DB Instance
- Deleting a DB Instance in a DB Cluster
- Modifying an Amazon RDS DB Instance and Using the Apply Immediately Parameter
- AWS Command Line Interface (CLI) Documentation
- rds
- describe-db-instances
- modify-db-instance
Unlock the Remediation Steps
Free 30-day Trial
Automatically audit your configurations with Conformity
and gain access to our cloud security platform.

You are auditing:
Instance Deletion Protection
Risk level: Medium