AWS RDS cluster delete protection is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_139
Category - Subcategory	Public Exposure - Database Endpoints
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	e27af8ed-2e01-4daa-84a6-5e3f56d9ba78

Impact

Enabling deletion protection on Amazon Relational Database Service (RDS) clusters and instances can help to prevent accidental deletion. When deletion protection is enabled, you cannot delete the RDS cluster or instance using the AWS Management Console, the AWS CLI, or the RDS API. This can be helpful if you want to ensure that your RDS resources are not deleted accidentally, either by yourself or by someone else with access to your AWS account.

How to Fix

Resource: aws_rds_cluster

• Arguments: deletion_protection [source,go]

---

resource "aws_rds_cluster" "default" { ...

• deletion_protection = true }

---