RDS Production termination protection

info.md

RDS Production Termination Protection

Create a policy like this, substituting your AWS account number, then attach it to all groups and roles. It will prevent deletion of RDS instances containing the string "prod" in their name.

Note: This is intended to prevent accidental deletion, and is easily sidestepped.

policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "rds:DeleteDBInstance"
            ],
            "Effect": "Deny",
            "Resource": "arn:aws:rds:*:123456789012:*prod*"
        }
    ]
}