DBS-C01 · Question #345
DBS-C01 Question #345: Real Exam Question with Answer & Explanation
The correct answer is B: Use a Deny statement for the Update:* action on the production database resources.. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-
Question
A company is running critical applications on AWS. Most of the application deployments use Amazon Aurora MySQL for the database stack. The company uses AWS CloudFormation to deploy the DB instances. The company's application team recently implemented a CI/CD pipeline. A database engineer needs to integrate the database deployment CloudFormation stack with the newly built CI/CD platform. Updates to the CloudFormation stack must not update existing production database resources. Which CloudFormation stack policy action should the database engineer implement to meet these requirements?
Options
- AUse a Deny statement for the Update:Modify action on the production database resources.
- BUse a Deny statement for the Update:* action on the production database resources.
- CUse a Deny statement for the Update:Delete action on the production database resources.
- DUse a Deny statement for the Update:Replace action on the production database resources.
Explanation
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-
Topics
Community Discussion
No community discussion yet for this question.