Question

A SysOps administrator manages a production application using a single CloudFormation stack. The stack contains an RDS DB instance, an EC2 Auto Scaling group, and several security groups. Before applying a template update that modifies the RDS instance class and adds a new parameter, the administrator must understand exactly which resources will be modified, replaced, or deleted — without actually applying any changes to the running environment. What is the MOST appropriate way to obtain this information?

Accepted Answer

Create a CloudFormation change set from the updated template and review the proposed resource actions before executing it

Answer

Run drift detection on the stack to compare the updated template against the currently deployed resources

Answer

Update the stack directly and monitor the stack events tab to see which resources change

Answer

Enable termination protection on the stack and then perform the update to prevent unintended deletions