Amazon Exam BDS-C00 Topic 13 Question 95 Discussion

Actual exam question for Amazon's BDS-C00 exam

Question #: 95
Topic #: 13

Your application uses CloudFormation to orchestrate your application's resources. During your testing phase before application went live, your Amazon RDS instance type was changed and caused the instance to be re-created, resulting in the loss of test data.

How should you prevent this from occurring in the future?

AWithin the AWS CloudFormation parameter with which users can select the Amazon RDS
instance type, set AllowedValues to only contain the current instance type

BUse an AWS CloudFormation stack policy to deny updates to the instance. Only allow
UpdateStack permission to IAM principles that are denied SetStackPolicy

CIn the AWS CloudFormation template, set the AWS::RDS::DBInstance's DBInstanceClass property to be read-only

DSubscribe to the AWS CloudFormation notification ''BeforeResourceUpdate'' and call
CancelStackUpdate if the resource identified is the Amazon RDS instance

EIn the AWS ClousFormation template, set the DeletionPolicy of the AWS::RDS::DBInstance's
DeletionPolicy property to ''Retain''

Show Suggested Answer

Suggested Answer: B

by Renea at Jun 19, 2024, 11:10 AM

Limited Time Offer

25%

Off

Get Premium BDS-C00 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Felicia

13 days ago

Option E is the way to go! Retaining the instance on deletion is the best way to ensure your test data is safe. Plus, it's a great way to keep your DBA happy.

upvoted 0 times

...

Remedios

14 days ago

Haha, option A is like trying to put a band-aid on a bullet wound. Limiting the allowed values? That's like putting a lock on a door that's already been kicked down.

upvoted 0 times

...

Lemuel

16 days ago

C'mon, option C? Making the instance type read-only? That's too restrictive. What if I need to upgrade the instance in the future? I'd go with option E and retain the instance on deletion.

upvoted 0 times

...

Gaston

26 days ago

I like option D. Subscribing to the CloudFormation events and canceling the update if it's the RDS instance is a proactive approach. That way, you can catch the change before it happens.

upvoted 0 times

...

Jamie

28 days ago

Option B seems like the best solution to prevent unwanted updates to the RDS instance. Restricting the IAM permissions is a good way to ensure only authorized personnel can make changes.

upvoted 0 times

Gerald

4 days ago

A) Within the AWS CloudFormation parameter with which users can select the Amazon RDS instance type, set AllowedValues to only contain the current instance type

upvoted 0 times

...

Candra

16 days ago

E) In the AWS ClousFormation template, set the DeletionPolicy of the AWS::RDS::DBInstance's DeletionPolicy property to ''Retain''

upvoted 0 times

...

Felicidad

19 days ago

B) Use an AWS CloudFormation stack policy to deny updates to the instance. Only allow UpdateStack permission to IAM principles that are denied SetStackPolicy

upvoted 0 times

...