Ensure cognito user pools deletion protection enabled to prevent accidental deletion
cognito_user_pool_deletion_protection_enabled
Deletion protection is a feature that allows you to lock a user pool to prevent it from being deleted. When deletion protection is enabled, you cannot delete the user pool. By default, deletion protection is disabled
Risk
If deletion protection is not enabled, the user pool can be deleted by any user with the necessary permissions. This can lead to loss of data and service disruption
Run this check with Prowler CLI
prowler aws --checks cognito_user_pool_deletion_protection_enabled
ARN template
arn:aws:cognito-idp:region:account:userpool/userpool-id
Remediation
Deletion protection should be enabled for the user pool to prevent accidental deletion
Source Code
Resource Type
AwsCognitoUserPool