Lack of protection against deletion - RDS | Fluid Attacks Database

Database

Description

The current configuration has no protection against deletion, this can lead to the deletion of databases in Amazon Web Services RDS.

Impact

Delete a database by mistake or without having to go through additional validations.

Recommendation

Securely configure the Amazon Web Services service, allowing protection against accidental deletion.

Threat

Attacker with access to the AWS console.

Expected Remediation Time

⏱️ 30 minutes.

Requirements

186 - Use the principle of least privilege 265 - Restrict access to critical processes

Rules

Aws Automated Backups Disabled Aws Deletion Protection Disabled Json Yaml Backup Retention Period Zero Terraform Missing Deletion Protection Json Yaml Missing Deletion Protection Terraform Backup Retention Period Zero

Fixes

Aws Cloudformation