All checks
Medium
CloudFormation stacks should have termination protection enabled
Flags AWS CloudFormation stacks that do not have termination protection enabled. Without termination protection, a stack can be deleted by anyone with cloudformation:DeleteStack, taking down every resource it manages.
- service
- CloudFormation
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Enable termination protection on every CloudFormation stack that manages production or otherwise critical resources.
- Open the CloudFormation console and select the stack.
- Choose Stack actions, then Edit termination protection.
- Set termination protection to Activated and confirm.
See which of your accounts this check is failing on.
Book a demo