RDS instance with no Multi-AZ, no deletion protection and no final snapshot

What it checks

RDS instance with no Multi-AZ, no deletion protection and no final snapshot

Where it applies

Terraform: aws_db_instance

CloudFormation: AWS::RDS::DBInstance

How to fix it

1. If this is genuinely prod: set deletion_protection = true AND skip_final_snapshot = false AND multi_az = true.
2. If genuinely dev/staging: rename the resource to make that obvious (`aws_db_instance.dev_*` or tag Environment=dev) so this rule and audit conversations move on.

Frameworks

• AWS Well-Architected REL.9

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules