A company uses AWS CloudFormation to deploy its application infrastructure. Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application. A SysOps administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources. Which solution will meet these requirements?

Question

Accepted Answer

C. Launch the CloudFormation templates using a stack policy with an explicit allow for all resources

Answer

A. Set up an AWS Config rule to alert based on changes to any CloudFormation stack. An AWS

Answer

B. Set up an Amazon EventBridge event with a rule to initiate based on any CloudFormation API

Answer

D. Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack from

A company uses AWS CloudFormation to deploy its application infrastructure. Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update…

Question

Options

How the community answered

Explanation

Topics

Community Discussion