Question

A CloudOps engineer manages a production environment using a single CloudFormation stack that includes an Aurora database and several stateless application resources. During routine stack updates to modify the application tier, the team is worried that an accidental change to the template could cause a replacement of the database resource and destroy production data. They still need to allow updates to all other resources in the stack. What is the MOST appropriate way to prevent updates to the database resource while permitting normal updates elsewhere?

Accepted Answer

Apply a stack policy that denies Update actions on the database resource's logical ID while allowing updates to all other resources.

Answer

Set a DeletionPolicy of Retain on the database resource so it cannot be modified during stack updates.

Answer

Enable termination protection on the CloudFormation stack to block any changes to the database.

Answer

Move the database into a separate stack and enable drift detection to alert on unwanted changes.