Question

A SysOps administrator manages a CloudFormation stack that provisions an application tier and an RDS DB instance holding production data. During a planned decommissioning of the application, the team will delete the stack, but they must ensure the RDS DB instance and its data are NOT destroyed when the stack is deleted. What is the MOST appropriate way to guarantee the database survives stack deletion?

Accepted Answer

Set the DeletionPolicy attribute to Retain on the RDS resource in the template and update the stack before deletion

Answer

Enable termination protection on the CloudFormation stack

Answer

Add the RDS resource to a stack policy that denies the Delete action

Answer

Enable drift detection on the stack so CloudFormation preserves modified resources