SAP-C02 Question 160
Select 3Your organization is using AWS CloudFormation to manage its cloud infrastructure. You need to ensure that any changes to critical resources, such as production databases, are reviewed and approved before they are implemented. Additionally, you want to prevent accidental deletion of these resources. Which combination of CloudFormation features should you use to meet this requirement?
- A
Create a CloudFormation change set to preview changes before applying them.
- B
Enable termination protection on critical CloudFormation stacks.
- C
Use AWS Config to track changes to resources managed by CloudFormation.
- D
Implement stack policies to restrict updates to certain critical resources.
- E
Set up CloudFormation drift detection to monitor changes to resources outside the stack.
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure changes to critical resources are reviewed and accidental deletions are prevented, you should use change sets to preview changes, enable termination protection on critical stacks, and implement stack policies to restrict updates to resources. These features collectively allow you to manage and secure your infrastructure effectively in a production environment.
- A. Correct.
Creating a CloudFormation change set allows you to preview proposed changes before applying them, ensuring they are reviewed and approved.
- B. Correct.
Enabling termination protection on a CloudFormation stack prevents accidental deletion of the stack, which is critical for production resources.
- C. Incorrect.
While AWS Config is useful for tracking configuration changes, it is not directly involved in reviewing or preventing changes made through CloudFormation.
- D. Correct.
Stack policies can restrict updates to specific resources within a stack, providing an additional layer of protection for critical resources.
- E. Incorrect.
Drift detection monitors resources for changes made outside of CloudFormation, but it does not prevent or review changes initiated by CloudFormation.