Spanner Database does not have drop protection enabled

Description

This policy is verifying whether the Spanner Database in Google Cloud Platform has drop protection enabled. The absence of this setting could lead to accidental deletion or losses of databases. "Drop protection" shields against the inadvertent dropping or deleting of a database, thus ensuring data persistency and integrity. Consequently, not having this setting activated can be a considerable risk, especially for mission-critical scenarios where any data loss could have damaging impacts on the business.

Code Example

resource "google_spanner_database" "database" {
  name     = "spanner-database"
  ...
+ enable_drop_protection = true
}

Remediation

Terraform

• Resource: google_spanner_database
• Arguments: enable_drop_protection

To fix this issue, you need to add the `enable_drop_protection` argument to the `google_spanner_database` resource in your Terraform code and set its value to `true`.

Rule Details

Field	Value
ID	IAC-0978
Severity	HIGH
IaC Type	Terraform
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV_GCP_120

References

• Checkov Rule

---