All checks
Low
RDS DB instances should have deletion protection enabled
Confirms that RDS DB instances have deletion protection enabled, so a stray delete of the instance fails; it does not stop the data inside it being dropped. Neptune instances are evaluated here as well, and take the neptune form of modify-db-instance.
- service
- RDS
- severity
- Low
- scope
- evaluated in every region
How to fix it
In the console
RDS → Databases → the DB instance → Modify → Deletion protection
With the AWS CLI
aws rds modify-db-instance --db-instance-identifier <db-instance-id> --deletion-protection --region <region>With Terraform
resource "aws_db_instance" "this" {
instance_class = var.instance_class
deletion_protection = true
}See which of your accounts this check is failing on.
Book a demo