Skip to content

AWS Neptune cluster deletion protection is disabled

Description

This policy ensures that AWS Neptune clusters have deletion protection enabled. Deletion Protection safeguards against accidental deletion of AWS resources, allowing for greater data protection and security.

Code Example

go
resource "aws_neptune_cluster" "example" {
  cluster_identifier      = "example"
+ deletion_protection     = true
}

Remediation

Terraform

  • Resource: aws_neptune_cluster
  • Arguments: deletion_protection

To fix this issue, you need to set the 'deletion_protection' parameter to 'true' in the AWS Neptune cluster settings.

Secure code example:

Rule Details

FieldValue
IDIAC-0492
SeverityINFO
IaC TypeTerraform
FrameworksTerraform, TerraformPlan
Checkov IDCKV2_AWS_58

References