🛡️ AWS DynamoDB Table is unused🟢

• Contextual name: 🛡️ Table is unused🟢
• ID: /ce/ca/aws/dynamodb/table-unused
• Tags:
  • 🟢 Policy with categories
  • 🟢 Policy with type
  • 🟢 Production policy
• Policy Type: COMPLIANCE_POLICY
• Policy Categories: COST

Logic

• 🧠 prod.logic.yaml🟢
  • 📗 AWS DynamoDB Table
  • 🔌 AWS DynamoDB Table - object.extracts.yaml
  • 🧪 test-data.json

Similar Policies

• Cloud Conformity: Unused Table

Description

Open File

Description

This policy identifies unused AWS DynamoDB Tables to help reduce unnecessary costs in your AWS environment. A DynamoDB table is considered unused if it has remained in an ACTIVE state for more than 30 days and its ItemCount parameter, representing the number of items stored in the table, is 0 (zero).

Rationale

Unused resources contribute to cloud waste and may incur avoidable costs, particularly when tables are provisioned with read and write capacity units or add unnecessary management overhead. Identifying and removing unused DynamoDB tables helps optimize costs and maintain a clean, well-managed infrastructure.

Audit

This policy flags an AWS DynamoDB Table as INCOMPLIANT if the Item Count is 0.

If the table is not in an ACTIVE state or was created less than 30 days ago, it is marked as INAPPLICABLE.

Remediation

Open File

Remediation

Remove Unused Amazon DynamoDB Tables

To remove unused Amazon DynamoDB tables from your AWS cloud account, perform the following steps.

From Console

1. Sign in to the AWS Management Console.

2. Navigate to the Amazon DynamoDB console.

3. In the left navigation pane, under Dashboard, choose Tables.

4. Select the DynamoDB table you want to remove and choose Delete from the top menu.

5. In the Delete table confirmation dialog, perform the following actions:

   • (Optional) Choose whether to delete any Amazon CloudWatch alarms associated with the table.
   • Enter confirm in the confirmation field.
   • Choose Delete to remove the selected table.

6. Repeat Steps 4 and 5 for each unused DynamoDB table in the current AWS Region.

7. If applicable, switch AWS Regions and repeat the remediation process.

From Command Line

Use the delete-table command (OSX/Linux/UNIX) to remove an unused Amazon DynamoDB table. After the request is submitted, the table transitions to the DELETING state until the removal process is complete.

... see more

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 AWS Well-Architected → 💼 COST04-BP02 Implement a decommissioning process			1		no data
💼 Cloudaware Framework → 💼 Waste Reduction			28		no data