Cluster deletion protection remediation

Using Console

Using CLI

To remediate the misconfiguration “Cluster Deletion Protection Should Be Enabled” for an AWS RDS cluster using AWS CLI, follow these steps:

Open the AWS CLI and run the following command to enable deletion protection for the RDS cluster:
```
aws rds modify-db-cluster --db-cluster-identifier your-cluster-name --deletion-protection
```
Replace your-cluster-name with the actual identifier of your RDS cluster.
After running the command, AWS will return the configuration details of the modified RDS cluster. Verify that the DeletionProtection parameter is set to true to confirm that deletion protection has been enabled successfully.
You can also verify the deletion protection status of the RDS cluster by running the following command:
```
aws rds describe-db-clusters --db-cluster-identifier your-cluster-name
```
Replace your-cluster-name with the actual identifier of your RDS cluster.
Check the output of the command to ensure that the DeletionProtection parameter is set to true.

By following these steps, you can remediate the misconfiguration “Cluster Deletion Protection Should Be Enabled” for an AWS RDS cluster using AWS CLI.

Using Python

To remediate the misconfiguration of Cluster Deletion Protection not being enabled for an AWS RDS cluster using Python, you can follow these steps:

Import the necessary libraries:

import boto3

Initialize the RDS client:

rds_client = boto3.client('rds')

Identify the RDS cluster for which you want to enable deletion protection. You can specify the cluster identifier or use describe_db_clusters to list all clusters and choose the one you want to update.
Enable deletion protection for the identified RDS cluster:

response = rds_client.modify_db_cluster(
    DBClusterIdentifier='your-cluster-identifier',
    DeletionProtection=True
)

Verify the modification was successful:

response = rds_client.describe_db_clusters(
    DBClusterIdentifier='your-cluster-identifier'
)

if response['DBClusters'][0]['DeletionProtection']:
    print('Deletion protection has been successfully enabled for the RDS cluster.')
else:
    print('Failed to enable deletion protection for the RDS cluster.')

By following these steps, you can remediate the misconfiguration of Cluster Deletion Protection not being enabled for an AWS RDS cluster using Python.

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

Cluster deletion protection remediation

Triage and Remediation

Remediation