If the deletion protection feature is enabled for the elastic IP address (EIP), the evaluation result is Compliant.

Scenarios

You can enable the deletion protection feature for EIPs to avoid business interruptions caused by accidental deletion.

Risk level

Default risk level: medium.

When you apply this rule, you can change the risk level based on your business requirements.

Compliance evaluation logic

  • If the deletion protection feature is enabled for the EIP, the evaluation result is Compliant.
  • If the deletion protection feature is not enabled for the EIP, the evaluation result is Incompliant. For more information about how to remediate an incompliant configuration, see the "Incompliance remediation" section of this topic.

Rule details

ItemDescription
Rule nameeip-delete-protection-enabled
Rule identifiereip-delete-protection-enabled
TagEipAddress
Automatic remediationNot supported
Trigger typeConfiguration change
Supported resource typeEIPs
Input parameterNone

Incompliance remediation

Enable deletion protection for EIPs. For more information, see Release a pay-as-you-go EIP.