CloudFormation stack must have termination protection enabled

High AWS General aws-cloudformation-stack-cloudformation-stack-term

Applies to

AWS::CloudFormation::Stack

What CGPulse checks

A resource passes this rule when enableTerminationProtection must equal true. Anything else is reported as a finding with the evaluated property value attached as evidence.

How to fix it

Enable deletion/termination protection to prevent accidental data loss. In AWS Console: Resource > Settings > enable Deletion protection. See: https://docs.aws.amazon.com/prescriptive-guidance/latest/backup-recovery/best-practices.html

CLI

aws cloudformation update-termination-protection --stack-name "{id}" --enable-termination-protection

Terraform

# CloudFormation termination protection is set outside Terraform
# Use aws cloudformation update-termination-protection CLI

Compliance frameworks

Is your environment compliant with this rule?

CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.

Run a free scan