# Resource Set deletion now available

You can now delete a custom Resource Set when you no longer need it. Deletion is a cascading, all-or-nothing operation: Aembit removes the Resource Set and every entity it contains in a single action that either completes fully or rolls back.

**What’s new:**

* **Cascading deletion**: Deleting a Resource Set also deletes everything it contains, including Access Policies, Client and Server Workloads, Trust Providers, Credential Providers, Access Conditions, and Standalone CAs, leaving no orphaned data behind.
* **Safeguards against accidental loss**: Deletion requires Write access to the Resource Set or an administrator role, and Aembit asks you to confirm the action in a dialog that lists what it removes. You can’t delete the Default Resource Set.
* **Audit coverage**: Aembit records an audit entry for each deleted entity, plus one for the Resource Set deletion itself, so the operation stays traceable through [Audit Logs](/user-guide/audit-report/audit-logs) and Log Streams.
* **Terraform lifecycle management**: Manage the same lifecycle as code with the `aembit_resource_set` resource. Destroying an `aembit_resource_set` performs the identical cascading delete, and the `resource_set_id` argument assigns or filters entities by Resource Set.

For the full workflow and its effects, see [Delete a Resource Set](/user-guide/administration/resource-sets/delete-resource-set). For managing Resource Sets as code, see [Scaling Aembit with Terraform](/get-started/concepts/scaling-terraform).