Checks whether the release protection feature is enabled for each Server Load Balancer (SLB) instance. If so, the evaluation result is Compliant.
Scenarios
You can enable the release protection feature for specific-purpose SLB instances. This prevents your business from being interrupted when you accidentally delete resources. This helps you improve business stability.
Risk level
Default risk level: high.
When you apply this rule, you can change the risk level based on your business requirements.
Compliance evaluation logic
- If the release protection feature is enabled for each SLB instance, the evaluation result is Compliant.
- If the release protection feature is disabled for an SLB instance, the evaluation result is Incompliant. For more information about how to remediate an incompliant configuration, see Incompliance remediation.
Rule details
Item | Description |
---|---|
Rule name | slb-delete-protection-enabled |
Rule identifier | slb-delete-protection-enabled |
Automatic remediation | Supported |
Trigger type | Configuration change |
Supported resource type | SLB |
Input parameter | None. |
Incompliance remediation
Enable the release protection feature for an SLB instance. For more information, see Create and manage a CLB instance.