SAP-C02 Question #333: Real Exam Question with Answer & Explanation

Question

A company is using AWS CloudFormation to deploy its infrastructure. The company is concerned that if a production CloudFormation stack is deleted, important data stored in Amazon RD5 databases or Amazon EBS volumes might also be deleted. now can the company prevent users from accidentally deleting data in this way?

Options

• AModify the CloudFormation templates to add a DeletionPolicy attribute to RDS and EBS
• BConfigure a stack policy that disallows the deletion of RDS and EBS resources.
• CModify IAM policies to deny deleting RDS and EBS resources that ate lagged with an
• DUse AWS Config rules to prevent deleting RDS and EBS resources.

Explanation

With the DeletionPolicy attribute you can preserve or (in some cases) backup a resource when its stack is deleted. You specify a DeletionPolicy attribute for each resource that you want to control. If a resource has no DeletionPolicy attribute, AWS CloudFormation deletes the resource by default. To keep a resource when its stack is deleted, specify Retain for that resource. You can use retain for any resource. For example, you can retain a nested stack, Amazon S3 bucket, or EC2 instance so that you can continue to use or modify those resources after you delete their https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute- deletionpolicy.html

No community discussion yet for this question.