AWS Neptune cluster deletion protection is disabled
Description
This policy ensures that AWS Neptune clusters have deletion protection enabled. Deletion Protection safeguards against accidental deletion of AWS resources, allowing for greater data protection and security.
Code Example
go
resource "aws_neptune_cluster" "example" {
cluster_identifier = "example"
+ deletion_protection = true
}Remediation
Terraform
- Resource: aws_neptune_cluster
- Arguments: deletion_protection
To fix this issue, you need to set the 'deletion_protection' parameter to 'true' in the AWS Neptune cluster settings.
Secure code example:
Rule Details
| Field | Value |
|---|---|
| ID | IAC-0492 |
| Severity | INFO |
| IaC Type | Terraform |
| Frameworks | Terraform, TerraformPlan |
| Checkov ID | CKV2_AWS_58 |