Question

A CloudOps engineer manages a production application using a single AWS CloudFormation stack that includes an RDS instance, an EC2 Auto Scaling group, and several security groups. Before applying an update to the template that modifies the RDS parameter group and instance class, the team wants to know exactly which resources will be modified, replaced, or deleted so they can avoid an unexpected database replacement during the deployment. What should the engineer do?

Accepted Answer

Create a CloudFormation change set from the updated template and review it before executing the update.

Answer

Run CloudFormation drift detection on the stack to identify which resources would be affected by the update.

Answer

Enable termination protection on the stack and then execute the update directly.

Answer

Deploy the updated template to a new stack and manually compare resources against the production stack.