Skip to main content

Use Case for AWS RDS DB Instances should have deletion protection enabled

  1. Configure AWS RDS DB Instances should have deletion protection enabled
  2. Use Case for AWS RDS DB Instances should have deletion protection enabled
  3. Triage Guides by Violation Type
    1. Triage AWS RDS DB Instances should have deletion protection enabled DELETION_PROTECTION_NOT_ENABLED

When should I use AWS RDS DBInstance Deletion Protection?​

Benefits of using AWS RDS DB Instance deletion protection​

  1. Prevents accidental deletion: The primary benefit of deletion protection is that it stops users from inadvertently deleting an RDS DB instance. This helps avoid data loss and service disruptions.
  2. Ensures compliance: In environments with strict data retention policies, deletion protection helps maintain compliance by ensuring that data is not removed unintentionally.

Caveats and limitations of using deletion protection​

  1. Not foolproof: Deletion protection safeguards against accidental removal, but it does not protect against all types of data loss, such as hardware failures or human errors within the database.
  2. DB instances within a DB cluster: Deletion protection functionality varies for DB instances that are part of a cluster. If a DB instance is a member of a cluster and the cluster has deletion protection enabled, the entire cluster is protected, even if deletion protection is not individually enabled for the specific DB instance (DeletionProtection in CloudFormation).