logo

Database

Aws Dynamodb Deletion Protection Disabled

Description

Identifies AWS DynamoDB tables that have deletion protection disabled or not enabled. Deletion protection is a critical security feature that prevents accidental or unauthorized deletion of DynamoDB tables and their data. Tables without this protection are at risk of accidental deletion which could lead to data loss and service disruption.

Weakness:

259 - Lack of protection against deletion - DynamoDB

Category: Functionality Abuse

Detection Strategy

    Scans all DynamoDB tables in the specified AWS region

    Reports a vulnerability if a table's DeletionProtectionEnabled setting is explicitly set to false or not enabled

    Skips tables where the DeletionProtectionEnabled setting is set to true (case-insensitive)