AWS Account Should Not Have Any Unused DynamoDB Tables
More Info:
Any unused Amazon DynamoDB tables available within your AWS account should be removed to help lower the cost of your monthly AWS bill.Risk Level
LowAddress
Cost optimization, Operational MaturityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the issue of having unused DynamoDB tables in your AWS account, you can follow these steps using the AWS Management Console:
-
Identify Unused Tables:
- Navigate to the DynamoDB console in your AWS Management Console.
- Review the list of tables to identify which tables are not being actively used.
-
Backup Data (if needed):
- Before deleting any tables, ensure that you have backed up any important data stored in those tables.
-
Delete Unused Tables:
- Select the unused DynamoDB table that you want to delete.
- Click on the “Actions” dropdown menu and select “Delete table”.
- Confirm the deletion by typing the table name and clicking on the “Delete” button.
-
Verify Deletion:
- Verify that the table has been successfully deleted by checking the list of DynamoDB tables in the console.
-
Repeat for Other Unused Tables:
- Repeat the above steps for all other identified unused DynamoDB tables in your account.
-
Monitor Regularly:
- Regularly monitor your DynamoDB tables to ensure that no new unused tables are created in the future. You can set up CloudWatch alarms to alert you when there are tables with no read or write activity for a specified period.
Using CLI
Using CLI
To remediate the issue of having unused DynamoDB tables in an AWS account using AWS CLI, you can follow these steps:
-
Identify Unused DynamoDB Tables:
- Run the following AWS CLI command to list all DynamoDB tables in your AWS account:
- Run the following AWS CLI command to list all DynamoDB tables in your AWS account:
-
Determine Unused Tables:
- Analyze the output of the above command to identify DynamoDB tables that are not being actively used by any application or service.
-
Delete Unused Tables:
- For each identified unused DynamoDB table, run the following AWS CLI command to delete the table:
Replace
<table-name>with the name of the unused DynamoDB table.
- For each identified unused DynamoDB table, run the following AWS CLI command to delete the table:
-
Confirm Deletion:
- After executing the delete command, verify the deletion of the DynamoDB table by listing all tables again using the following command:
Ensure that the unused table is no longer present in the list.
- After executing the delete command, verify the deletion of the DynamoDB table by listing all tables again using the following command:
-
Automate the Process (Optional):
- To regularly check for and delete unused DynamoDB tables, you can create a script that automates the above steps and schedule it to run at regular intervals using AWS CloudWatch Events or Lambda.
Using Python
Using Python
To remediate unused DynamoDB tables in AWS using Python, you can follow these steps:Step 1: Install the AWS SDK for Python (Boto3) if you haven’t already. You can install it using pip:Step 2: Write a Python script to identify and delete unused DynamoDB tables. Here is an example script that lists all DynamoDB tables and deletes any table that has no items:Step 3: Run the Python script in your AWS environment. Make sure that your AWS credentials are properly configured to allow the script to access and delete DynamoDB tables.This script will list all DynamoDB tables in your AWS account and delete any table that has no items. Make sure to review the list of tables before running the script to avoid accidentally deleting important tables.Please note that this script assumes that you have the necessary permissions to list and delete DynamoDB tables in your AWS account. Make sure to test the script in a non-production environment before running it in a production environment.