Medium
DynamoDB
Regional
DynamoDB tables should have deletion protection enabled
NIST 800-53
Description
Checks whether Amazon DynamoDB table has deletion protection enabled. The control fails if a DynamoDB table doesn't have deletion protection enabled. To protect DynamoDB tables from accidental deletion using the deletion protection property, ensuring tables are not accidentally deleted during regular table management operations by administrators, which helps prevent disruption to business operations.
Remediation
To remediate this issue, enable deletion protection on your DynamoDB tables to prevent accidental deletion.
Steps
- Go to the AWS DynamoDB console
- Select the table that needs deletion protection enabled
- Go to the 'Additional settings' tab
- Enable 'Deletion protection'
- Save the changes
Compliance
NIST 800-53