diff --git a/terraform/bootstrap/main.tf b/terraform/bootstrap/main.tf
index 3693cb0f4..a518530f1 100644
--- a/terraform/bootstrap/main.tf
+++ b/terraform/bootstrap/main.tf
@@ -13,4 +13,8 @@ module "s3" {
 resource "cloudfoundry_service_key" "bucket_creds" {
   name             = "${local.s3_service_name}-access"
   service_instance = module.s3.bucket_id
+
+  lifecycle {
+    prevent_destroy = true
+  }
 }