Checks whether release protection is enabled for each ApsaraDB for MongoDB instance. If enabled, the evaluation result is Compliant. If not, the evaluation result is Non-compliant.
Use cases
Use this rule to verify that release protection is enabled on all ApsaraDB for MongoDB instances to prevent accidental instance deletion.
Risk level
Default risk level: medium.
When you apply this rule, you can change the risk level based on your business requirements.
Compliance evaluation logic
If release protection is enabled for an ApsaraDB for MongoDB instance, the evaluation result is Compliant.
If release protection is disabled for an ApsaraDB for MongoDB instance, the evaluation result is Non-compliant.
Rule details
|
Item |
Description |
|
Rule name |
mongodb-instance-release-protection |
|
Rule identifier |
mongodb-instance-release-protection |
|
Tag |
MongoDB |
|
Automatic remediation |
Not supported |
|
Trigger type |
Configuration change |
|
Supported resource type |
ApsaraDB for MongoDB instance |
|
Input parameter |
None. |