diff --git a/terraform/vpc.tf b/terraform/vpc.tf
index 3fbdf18..49a0f2e 100644
--- a/terraform/vpc.tf
+++ b/terraform/vpc.tf
@@ -10,6 +10,12 @@ resource "aws_vpc" "this" {
   tags = {
     Name = "syslog-server-vpc"
   }
+
+  # file-share (PLAT-77) places its subnet in this VPC. Replacing it takes
+  # that share down with the collector.
+  lifecycle {
+    prevent_destroy = true
+  }
 }
 
 resource "aws_internet_gateway" "this" {
@@ -18,6 +24,10 @@ resource "aws_internet_gateway" "this" {
   tags = {
     Name = "syslog-server-igw"
   }
+
+  lifecycle {
+    prevent_destroy = true
+  }
 }
 
 resource "aws_subnet" "public" {
@@ -66,6 +76,10 @@ resource "aws_vpn_gateway" "office" {
   tags = {
     Name = "syslog-server-office"
   }
+
+  lifecycle {
+    prevent_destroy = true
+  }
 }
 
 resource "aws_customer_gateway" "ronkonkoma" {
@@ -87,6 +101,10 @@ resource "aws_vpn_connection" "office" {
   tags = {
     Name = "syslog-server-office"
   }
+
+  lifecycle {
+    prevent_destroy = true
+  }
 }
 
 resource "aws_vpn_connection_route" "office_lans" {