Low
RDS
Regional
RDS DB instances should have deletion protection enabled
NIST
Description
Checks if RDS instances have deletion protection enabled. This check also fetches the tags associated with each RDS instance.
Remediation
To enable deletion protection for the identified RDS DB instance, follow these steps:
Steps
- Log in to the AWS Management Console and open the Amazon RDS console.
- In the navigation pane, click on 'Databases'.
- Select the RDS DB instance that requires deletion protection.
- Choose 'Modify'.
- In the 'Modify DB Instance' page, scroll down to the 'Deletion protection' section.
- Check the box next to 'Enable deletion protection'.
- Scroll to the bottom of the page and click on 'Continue'.
- Review your changes. You can apply them immediately or during the next maintenance window.
- Click 'Modify DB Instance' to save the changes.
Compliance
NIST