Enable destroy protection

Prevent accidental destruction of environments in env zero by enabling destroy protection, which disables the Destroy button, TTL panel, and Scheduled Destroy.

Enabling “Destroy protection” will prevent destruction of environments. The policy is configured per Project.

The following features will be restricted:

• The Destroy button and Time Left indication in the Environment screen will be disabled.
• The TTL panel in Create/Redeploy Environment screen will be hidden.
• Scheduled Destroy will be disabled.

TTL & Scheduled Destroy Reset

For environments that existed before enabling destroy protection, TTL & Scheduled Destroy configurations will be deleted.

To enable “Destroy Protection”, mark Prevent destroy of environments in this project. This can be found in each Project’s Settings page, under the Policies tab.

Destroy protection applies to destroy deployments, which delete infrastructure. Marking an environment as inactive is a separate action that leaves the resources in place, and it is controlled by the Archive Environment permission rather than by this policy.

Next steps

• Write an approval policy that requires sign-off on destroy deployments
• Review all runtime and deployment policies