A Company Uses AWS CloudFormation to Deploy Its Application Infrastructure

question 390

Multiple Choice

A company uses AWS CloudFormation to deploy its application infrastructure. Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application. A SysOps Administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources. Which solution will meet these requirements?

• A) Set up an AWS Config rule to alert based on changes to any CloudFormation stack. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.
• B) Set up an Amazon CloudWatch Events event with a rule to trigger based on any CloudFormation API call. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.
• C) Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update:*. Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update:*.
• D) Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack from updating, with a condition based on the specific Amazon Resource names (ARNs) of the protected resources.

---

Definitions:

Sensitive News

Information or updates that require careful handling and dissemination due to potential impact on emotions or situations.

Telecommuting Plan

A strategy or arrangement that allows employees to work from a remote location, outside of the traditional office environment, often leveraging technology.

Direct Opening

A straightforward beginning to a piece of writing or speech, which clearly states the purpose or main idea from the start.

Formal Research

The systematic investigation into and study of materials and sources in order to establish facts and reach new conclusions in a structured and organized manner.