VIEW RULE IN DATADOG VIEW MISCONFIGURATIONS

Description

This feature verifies if deletion protection is active on an Amazon DocumentDB cluster. The feature will not pass if deletion protection is not enabled.

Deletion protection provides an extra level of security to prevent accidental deletion of databases or unauthorized deletions. A cluster with deletion protection enabled cannot be deleted. Prior to deleting a cluster, deletion protection must be disabled. Deletion protection is automatically enabled when creating a cluster in the Amazon DocumentDB console.

Remediation

To activate deletion protection for an already existing Amazon DocumentDB cluster, refer to the section on modifying a cluster in the Amazon DocumentDB Developer Guide. In the Modify Cluster section, select the option to enable deletion protection.