Datastore Destroy Protection

✓ Guardrail IaC Guardrails Beta Deployment And Infrastructure

iac.datastore-destroy-protection

Ensures stateful resources (databases, storage buckets, caches) have lifecycle { prevent_destroy = true } to prevent accidental data loss.

iac datastores prevent_destroy stateful data safety

Get Started View All IaC Guardrails

Compatible Integrations

This guardrail works with the following integrations. Click to see how to use Datastore Destroy Protection with each collector.

Datastore Destroy Protection + Terraform Collector Provides parsed IaC configuration data

→

Enable This Guardrail

Add the parent policy to your lunar-config.yml to enable this guardrail.

📄 lunar-config.yml

policies:
  - uses: github://earthly/lunar-lib/policies/iac@v1.0.0
    include: [datastore-destroy-protection]
    # with: ...

How This Guardrail Works

This guardrail is part of the IaC Guardrails policy. It evaluates data collected by integrations and produces a pass/fail check with actionable feedback.

When enabled, this check runs automatically on every PR and in AI coding workflows, providing real-time enforcement of your engineering standards.

Learn How Lunar Works →

↓ Integrations Gather Data

Collectors extract metadata from code, CI pipelines, tool outputs, and scans

{ } Centralized as JSON

All data merged into each component's unified metadata document

✓ This Guardrail Checks Current

Datastore Destroy Protection runs and provides pass/fail feedback

IaC Guardrails

This guardrail is part of the IaC Guardrails policy, which includes 4 guardrails for deployment and infrastructure.

View Policy

Ready to Automate Your Standards?

See how Lunar can turn your engineering wiki, compliance docs, or postmortem action items into automated guardrails with our 100+ built-in guardrails.

Works with any process

Infrastructure conventions

Post-mortem action items

Security & compliance policies

Testing & quality requirements

Automate Now

Turn any process doc into guardrails

Book a Demo