hands-on lab

Preventing Updates to AWS CloudFormation Resources with Stack Policies

Difficulty: Intermediate

Duration: Up to 45 minutes

Students: 85

Rating: 5/5

Start lab

Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.

Learn and validateUse validations to check your solutions every step of the way.

See resultsTrack your knowledge and monitor your progress.

Description

In AWS CloudFormation, a newly created stack allows updates to all stack resources by default. A stack update can be carried out by anyone with stack update permissions, and certain updates may result in a complete replacement of a resource. When using AWS CloudFormation to manage cloud infrastructure, it's essential to employ the correct safeguards to avoid unintentional updates to business-critical services.

Defining a stack policy along with your CloudFormation stack can prevent resources from being unintentionally updated or deleted during a stack update.

In this lab, you will learn how to apply and override a stack policy that is associated with an AWS CloudFormation stack.

Learning Objectives

Upon completion of this intermediate-level lab, you will be able to:

Apply a stack policy to an AWS CloudFormation stack to prevent updates or deletion of stack resources
Override a stack policy for a one-time stack update