Medium
CloudFormation
Regional
CloudFormation stacks should have termination protection enabled
Description
Flags AWS CloudFormation stacks that do not have termination protection enabled. Without termination protection, a stack can be deleted by anyone with cloudformation:DeleteStack — taking down every resource it manages.
Remediation
Enable termination protection on every CloudFormation stack that manages production or otherwise critical resources.
Steps
- Open the CloudFormation console and select the stack.
- Choose Stack actions, then Edit termination protection.
- Set termination protection to Activated and confirm.