Topic 1 Question 89
A company is using AWS CloudFormation to deploy its infrastructure. The company is concerned that, if a production CloudFormation stack is deleted, important data stored in Amazon RDS databases or Amazon EBS volumes might also be deleted.
How can the company prevent users from accidentally deleting data in this way?
Modify the CloudFormation templates to add a DeletionPolicy attribute to RDS and EBS resources.
Configure a stack policy that disallows the deletion of RDS and EBS resources.
Modify IAM policies lo deny deleting RDS and EBS resources that are tagged with an "aws:cloudformation:stack-name" tag.
Use AWS Config rules to prevent deleting RDS and EBS resources.
ユーザの投票
コメント(17)
- 正解だと思う選択肢: A
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html With the DeletionPolicy attribute you can preserve, and in some cases, backup a resource when its stack is deleted. You specify a DeletionPolicy attribute for each resource that you want to control. If a resource has no DeletionPolicy attribute, AWS CloudFormation deletes the resource by default. Retain CloudFormation keeps the resource without deleting the resource or its contents when its stack is deleted. You can add this deletion policy to any resource type. When CloudFormation completes the stack deletion, the stack will be in Delete_Complete state; however, resources that are retained continue to exist and continue to incur applicable charges until you delete those resource
👍 6zejou12023/03/17 - 正解だと思う選択肢: A
"DeletionPolicy" : "Retain" can prevent to delete resource
👍 4masssa2023/01/23 - 正解だと思う選択肢: A
I switch to A: https://www.examtopics.com/discussions/amazon/view/5233-exam-aws-certified-solutions-architect-professional-topic-1/
Modifying the CloudFormation templates to add a DeletionPolicy attribute to RDS and EBS resources, is another valid solution to prevent accidental deletion of data in this scenario. By adding a DeletionPolicy attribute of "Retain" to RDS and EBS resources in the CloudFormation templates, the company can ensure that these resources and their data are not deleted when the CloudFormation stack is deleted. This is a way to prevent accidental deletion of data by preserving the resources when the stack is deleted.
👍 3masetromain2023/01/18
シャッフルモード