Distinguish EC2 API termination protection from other termination paths

Know which failures remain possible after the protection setting is enabled.

Source facts

EC2 termination protection controls termination through the EC2 API and interfaces using it. It does not prevent termination caused by specified operating-system shutdown behavior, scheduled AWS events or Auto Scaling health and scale-in actions. AWS also states that termination protection cannot be enabled for Spot Instances.

Source: AWS Documentation.

Applicability

This concerns the DisableApiTermination attribute, not a backup, high-availability policy or universal instance-survival guarantee.

DSE recommendation

DSE recommends recording the instance lifecycle mechanisms before choosing protection settings. Review operating-system shutdown behavior and Auto Scaling controls separately with the workload owner. Make the setting visible in the instance inventory and define the approved process for temporarily removing it. Keep recovery and data-retention plans independent of accidental-termination prevention. Avoid marking a critical workload protected solely because one console option is enabled; document each remaining administrative and automated termination path. Make the remaining termination paths visible in the workload handoff and assign an owner to each control. Ask the service owner to identify the recovery evidence still required for the workload, keeping prevention settings and recovery acceptance as separate decisions.

Verification

Proposed verification: inspect termination protection and relevant shutdown or scaling settings on an approved test instance. Rehearse an authorized disposable termination case and confirm the expected block. Review the documented exceptions without triggering a destructive production event merely to test the setting.

Official reference

AWS Documentation. Reviewed October 20, 2026.