Amazon Exam DBS-C01 Topic 4 Question 56 Discussion

Actual exam question for Amazon's DBS-C01 exam

Question #: 56
Topic #: 4

A database specialist is constructing an AWS CloudFormation stack using AWS CloudFormation. The database expert wishes to avoid the stack's Amazon RDS ProductionDatabase resource being accidentally deleted.

Which solution will satisfy this criterion?

ACreate a stack policy to prevent updates. Include Effect : ProductionDatabase and Resource : Deny in the policy.

BCreate an AWS CloudFormation stack in XML format. Set xAttribute as false.

CCreate an RDS DB instance without the DeletionPolicy attribute. Disable termination protection.

DCreate a stack policy to prevent updates. Include Effect, Deny, and Resource :ProductionDatabase in the policy.

Show Suggested Answer

Suggested Answer: D

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html 'When you set a stack policy, all resources are protected by default. To allow updates on all resources, we add an Allow statement that allows all actions on all resources. Although the Allow statement specifies all resources, the explicit Deny statement overrides it for the resource with the ProductionDatabase logical ID. This Deny statement prevents all update actions, such as replacement or deletion, on the ProductionDatabase resource.'

by Kimbery at May 07, 2022, 10:15 AM

Limited Time Offer

25%

Off

Get Premium DBS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!