ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 188 - DBS-C01 discussion

Report
Export

A database specialist is constructing an AWS CloudFormation stack using AWS CloudFormation. The database expert wishes to avoid the stack's Amazon RDS ProductionDatabase resource being accidentally deleted.

Which solution will satisfy this criterion?

A.
Create a stack policy to prevent updates. Include “Effect” : “ProductionDatabase” and “Resource” : “Deny” in the policy.
Answers
A.
Create a stack policy to prevent updates. Include “Effect” : “ProductionDatabase” and “Resource” : “Deny” in the policy.
B.
Create an AWS CloudFormation stack in XML format. Set xAttribute as false.
Answers
B.
Create an AWS CloudFormation stack in XML format. Set xAttribute as false.
C.
Create an RDS DB instance without the DeletionPolicy attribute. Disable termination protection.
Answers
C.
Create an RDS DB instance without the DeletionPolicy attribute. Disable termination protection.
D.
Create a stack policy to prevent updates. Include Effect, Deny, and Resource :ProductionDatabase in the policy.
Answers
D.
Create a stack policy to prevent updates. Include Effect, Deny, and Resource :ProductionDatabase in the policy.
Suggested answer: D

Explanation:


https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html

"When you set a stack policy, all resources are protected by default. To allow updates on all resources, we add an Allow statement that allows all actions on all resources. Although the Allow statement specifies all resources, the explicit Deny statement overrides it for the resource with the ProductionDatabase logical ID. This Deny statement prevents all update actions, such as replacement or deletion, on the ProductionDatabase resource."

asked 16/09/2024
Anupam Ojha
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first