All checks
Medium
Cognito user pools should have deletion protection enabled
Flags Amazon Cognito user pools that do not have deletion protection enabled. Without deletion protection, a single DeleteUserPool call removes the pool and every account in it.
- service
- Cognito
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Enable deletion protection on every production Cognito user pool.
- Open the Amazon Cognito console and select the user pool.
- Choose User pool properties and select Edit.
- Set Deletion protection to Active.
- Save the changes.
See which of your accounts this check is failing on.
Book a demo