If the deletion protection feature is enabled for the elastic IP address (EIP), the evaluation result is Compliant.
Scenarios
You can enable the deletion protection feature for EIPs to avoid business interruptions caused by accidental deletion.
Risk level
Default risk level: medium.
When you apply this rule, you can change the risk level based on your business requirements.
Compliance evaluation logic
- If the deletion protection feature is enabled for the EIP, the evaluation result is Compliant.
- If the deletion protection feature is not enabled for the EIP, the evaluation result is Incompliant. For more information about how to remediate an incompliant configuration, see the "Incompliance remediation" section of this topic.
Rule details
Item | Description |
---|---|
Rule name | eip-delete-protection-enabled |
Rule identifier | eip-delete-protection-enabled |
Tag | EipAddress |
Automatic remediation | Not supported |
Trigger type | Configuration change |
Supported resource type | EIPs |
Input parameter | None |
Incompliance remediation
Enable deletion protection for EIPs. For more information, see Release a pay-as-you-go EIP.