---
title: RDS instances should have deletion protection enabled
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > RDS instances should have deletion
  protection enabled
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# RDS instances should have deletion protection enabled
 
## Description{% #description %}

This rule checks that deletion protection is enabled for RDS instances. Activating deletion protection adds an extra layer of security against accidental or unauthorized deletion of a database. Deletion protection must be disabled before deletion requests can be accomplished.

Instances of Aurora, Neptune, and DocumentDB engines are skipped because those engines set deletion protection on the DB cluster, not on its instances. Every other engine is evaluated, including engines that AWS adds later.

## Remediation{% #remediation %}

To enable deletion protection for an RDS instance, refer to the section [Modifying an Amazon RDS instance in the Amazon RDS User Guide](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.DBInstance.Modifying.html).