{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/distinguish-ec2-api-termination-protection-from-other-termination-paths/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/",
        "slug": "distinguish-ec2-api-termination-protection-from-other-termination-paths",
        "url": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/distinguish-ec2-api-termination-protection-from-other-termination-paths/"
        },
        "title": "Distinguish EC2 API termination protection from other termination paths",
        "summary": "Know which failures remain possible after the protection setting is enabled.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "cyber-defense",
            "label": "Cyber defense",
            "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-10-20T18:13:51+00:00",
        "modified_at": "2026-10-20T18:34:29+00:00",
        "reviewed_on": "2026-10-20",
        "reading_minutes": 2,
        "word_count": 239,
        "potentially_affected": "This concerns the DisableApiTermination attribute, not a backup, high-availability policy or universal instance-survival guarantee.",
        "dse_recommendation": "DSE recommends recording the instance lifecycle mechanisms before choosing protection settings.",
        "primary_source": {
            "name": "AWS Documentation",
            "url": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_ChangingDisableAPITermination.html",
            "published_on": null,
            "authority": "docs.aws.amazon.com"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<p>Know which failures remain possible after the protection setting is enabled.</p>\n<h2>Source facts</h2>\n<p>EC2 termination protection controls termination through the EC2 API and interfaces using it. It does not prevent termination caused by specified operating-system shutdown behavior, scheduled AWS events or Auto Scaling health and scale-in actions. AWS also states that termination protection cannot be enabled for Spot Instances.</p>\n<p>Source: <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_ChangingDisableAPITermination.html\">AWS Documentation</a>.</p>\n<h2>Applicability</h2>\n<p>This concerns the DisableApiTermination attribute, not a backup, high-availability policy or universal instance-survival guarantee.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends recording the instance lifecycle mechanisms before choosing protection settings. Review operating-system shutdown behavior and Auto Scaling controls separately with the workload owner. Make the setting visible in the instance inventory and define the approved process for temporarily removing it. Keep recovery and data-retention plans independent of accidental-termination prevention. Avoid marking a critical workload protected solely because one console option is enabled; document each remaining administrative and automated termination path. Make the remaining termination paths visible in the workload handoff and assign an owner to each control. Ask the service owner to identify the recovery evidence still required for the workload, keeping prevention settings and recovery acceptance as separate decisions.</p>\n<h2>Verification</h2>\n<p>Proposed verification: inspect termination protection and relevant shutdown or scaling settings on an approved test instance. Rehearse an authorized disposable termination case and confirm the expected block. Review the documented exceptions without triggering a destructive production event merely to test the setting.</p>\n<h2>Official reference</h2>\n<p><a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_ChangingDisableAPITermination.html\">AWS Documentation</a>. Reviewed October 20, 2026.</p>",
        "content_text": "Know which failures remain possible after the protection setting is enabled.\nSource facts\nEC2 termination protection controls termination through the EC2 API and interfaces using it. It does not prevent termination caused by specified operating-system shutdown behavior, scheduled AWS events or Auto Scaling health and scale-in actions. AWS also states that termination protection cannot be enabled for Spot Instances.\nSource: AWS Documentation.\nApplicability\nThis concerns the DisableApiTermination attribute, not a backup, high-availability policy or universal instance-survival guarantee.\nDSE recommendation\nDSE recommends recording the instance lifecycle mechanisms before choosing protection settings. Review operating-system shutdown behavior and Auto Scaling controls separately with the workload owner. Make the setting visible in the instance inventory and define the approved process for temporarily removing it. Keep recovery and data-retention plans independent of accidental-termination prevention. Avoid marking a critical workload protected solely because one console option is enabled; document each remaining administrative and automated termination path. Make the remaining termination paths visible in the workload handoff and assign an owner to each control. Ask the service owner to identify the recovery evidence still required for the workload, keeping prevention settings and recovery acceptance as separate decisions.\nVerification\nProposed verification: inspect termination protection and relevant shutdown or scaling settings on an approved test instance. Rehearse an authorized disposable termination case and confirm the expected block. Review the documented exceptions without triggering a destructive production event merely to test the setting.\nOfficial reference\nAWS Documentation. Reviewed October 20, 2026.",
        "content_markdown": "Know which failures remain possible after the protection setting is enabled.\n\n## Source facts\n\nEC2 termination protection controls termination through the EC2 API and interfaces using it. It does not prevent termination caused by specified operating-system shutdown behavior, scheduled AWS events or Auto Scaling health and scale-in actions. AWS also states that termination protection cannot be enabled for Spot Instances.\n\nSource: [AWS Documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_ChangingDisableAPITermination.html).\n\n## Applicability\n\nThis concerns the DisableApiTermination attribute, not a backup, high-availability policy or universal instance-survival guarantee.\n\n## DSE recommendation\n\nDSE recommends recording the instance lifecycle mechanisms before choosing protection settings. Review operating-system shutdown behavior and Auto Scaling controls separately with the workload owner. Make the setting visible in the instance inventory and define the approved process for temporarily removing it. Keep recovery and data-retention plans independent of accidental-termination prevention. Avoid marking a critical workload protected solely because one console option is enabled; document each remaining administrative and automated termination path. Make the remaining termination paths visible in the workload handoff and assign an owner to each control. Ask the service owner to identify the recovery evidence still required for the workload, keeping prevention settings and recovery acceptance as separate decisions.\n\n## Verification\n\nProposed verification: inspect termination protection and relevant shutdown or scaling settings on an approved test instance. Rehearse an authorized disposable termination case and confirm the expected block. Review the documented exceptions without triggering a destructive production event merely to test the setting.\n\n## Official reference\n\n[AWS Documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_ChangingDisableAPITermination.html). Reviewed October 20, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/",
                "url": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-10-20"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Cybersecurity",
                        "item": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 3,
                        "name": "Distinguish EC2 API termination protection from other termination paths",
                        "item": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/#article",
                "identifier": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/",
                "url": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/",
                "headline": "Distinguish EC2 API termination protection from other termination paths",
                "description": "Know which failures remain possible after the protection setting is enabled.",
                "abstract": "Know which failures remain possible after the protection setting is enabled.",
                "articleBody": "Know which failures remain possible after the protection setting is enabled.\nSource facts\nEC2 termination protection controls termination through the EC2 API and interfaces using it. It does not prevent termination caused by specified operating-system shutdown behavior, scheduled AWS events or Auto Scaling health and scale-in actions. AWS also states that termination protection cannot be enabled for Spot Instances.\nSource: AWS Documentation.\nApplicability\nThis concerns the DisableApiTermination attribute, not a backup, high-availability policy or universal instance-survival guarantee.\nDSE recommendation\nDSE recommends recording the instance lifecycle mechanisms before choosing protection settings. Review operating-system shutdown behavior and Auto Scaling controls separately with the workload owner. Make the setting visible in the instance inventory and define the approved process for temporarily removing it. Keep recovery and data-retention plans independent of accidental-termination prevention. Avoid marking a critical workload protected solely because one console option is enabled; document each remaining administrative and automated termination path. Make the remaining termination paths visible in the workload handoff and assign an owner to each control. Ask the service owner to identify the recovery evidence still required for the workload, keeping prevention settings and recovery acceptance as separate decisions.\nVerification\nProposed verification: inspect termination protection and relevant shutdown or scaling settings on an approved test instance. Rehearse an authorized disposable termination case and confirm the expected block. Review the documented exceptions without triggering a destructive production event merely to test the setting.\nOfficial reference\nAWS Documentation. Reviewed October 20, 2026.",
                "datePublished": "2026-10-20T18:13:51+00:00",
                "dateModified": "2026-10-20T18:34:29+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/distinguish-ec2-api-termination-protection-from-other-termination-paths/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Distinguish EC2 API termination protection from other termination paths"
                },
                "articleSection": [
                    "Cybersecurity",
                    "IT"
                ],
                "keywords": [
                    "Cybersecurity",
                    "IT",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 239,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "AWS Documentation",
                    "url": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_ChangingDisableAPITermination.html"
                }
            }
        ]
    }
}