AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

A DevOps engineer updates a networking CloudFormation stack that currently exports its VPC ID as DevVpcId. The revised template exports a different VPC ID but retains the same export name. On update CloudFormation fails with "Export DevVpcId cannot be updated as it is in use by stack AppStack." AppStack must stay running and unchanged. Which action enables deployment of the new VPC without triggering the export error?

Rename the new VPC ID output to a unique export name (for example DevVpcIdV2) and then update the networking stack.
Grant the deployment role cloudformation:UpdateExport permission and retry the stack update.
Add the CAPABILITY_NAMED_IAM flag to the update command so CloudFormation can overwrite the existing export.
Enable termination protection on AppStack before updating the networking stack to suppress the export conflict.

Report Issue

Answer Description

CloudFormation does not permit changing or deleting an exported value that is being imported by another stack. Because AppStack is still importing the output named DevVpcId, the networking stack cannot update that existing export. The correct remediation is to keep the original export intact and create a new export with a unique name (for example DevVpcIdV2) that contains the new VPC ID. This allows the networking stack update to succeed without disrupting AppStack. The other options do not address the export-name constraint: adding CAPABILITY_NAMED_IAM only affects IAM resources, modifying stack permissions will not bypass the limitation, and enabling rollback protection or termination protection has no impact on export name conflicts.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.