Control: AWS > EC2 > AMI > Deregistration Protection

Configure the Deregistration Protection settings for AWS > EC2 > AMI.

AMI deregistration protection helps prevent accidental deregistration of Amazon Machine Images. When enabled with a cooldown, there is a mandatory 24-hour cooldown period after disabling protection before the AMI can be deregistered.

Resource Types

This control targets the following resource types:

AWS > EC2 > AMI

Policies

The following policies can be used to configure this control:

AWS > EC2 > AMI > Deregistration Protection

Permissions

Cloud permissions used by this control and its actions:

ec2:EnableImageDeregistrationProtection
ec2:DisableImageDeregistrationProtection

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-ec2#/control/types/amiDeregistrationProtection

Category URI

tmod:@turbot/turbot#/control/categories/resourceDataProtection

GraphQL

query controlType(id: "tmod:@turbot/aws-ec2#/control/types/amiDeregistrationProtection") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-ec2#/control/types/amiDeregistrationProtection'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-ec2#/control/types/amiDeregistrationProtection"