Back to All Checks
Medium Cognito Regional

Cognito user pools should have deletion protection enabled

Description

Flags Amazon Cognito user pools that do not have deletion protection enabled. Without deletion protection, a single DeleteUserPool call removes the pool and every account in it.

Remediation

Enable deletion protection on every production Cognito user pool.

Steps

  1. Open the Amazon Cognito console and select the user pool.
  2. Choose User pool properties and select Edit.
  3. Set Deletion protection to Active.
  4. Save the changes.
Start Your Free Security Check