A company is running critical applications on AWS. Most of the application deployments use Amazon Aurora MySQL for the database stack. The company uses AWS CloudFormation to deploy the DB instances.
The company's application team recently implemented a CI/CD pipeline. A database engineer needs to integrate the database deployment CloudFormation stack with the newly built CI/CD platform. Updates to the CloudFormation stack must not update existing production database resources.
Which CloudFormation stack policy action should the database engineer implement to meet these requirements?

A. Use a Deny statement for the Update:Modify action on the production database resources.

B. Use a Deny statement for the Update:* action on the production database resources.

C. Use a Deny statement for the Update:Delete action on the production database resources.

D. Use a Deny statement for the Update:Replace action on the production database resources.








 

Suggested Answer: A

Community Answer: B




This question is in DBS-C01 AWS Certified Database – Specialty Exam
For getting AWS Certified Database – Specialty Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exam.