All checks
Low
Neptune DB clusters should have deletion protection enabled
Checks that a Neptune DB cluster has deletion protection enabled, so a request to delete the cluster, accidental or unauthorized, fails until the protection is turned off. It guards the cluster, not the data in it: a query that drops data still runs.
- service
- Neptune
- severity
- Low
- scope
- evaluated in every region
How to fix it
- Affects another check: RDS.7 reads the same setting on this cluster, so enabling it here clears that finding too.
In the console
Neptune → Databases → the DB cluster → Actions → Modify
- Enable deletion protection
- Selected
With the AWS CLI
aws neptune modify-db-cluster --db-cluster-identifier <db-cluster-identifier> --deletion-protection --region <region>With Terraform
resource "aws_neptune_cluster" "this" {
cluster_identifier = var.cluster_identifier
deletion_protection = true
}See which of your accounts this check is failing on.
Book a live scan