AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

A stack policy can evaluate the type of update attempted on a specific logical resource. By denying the Update:Replace and Delete actions for the RDS logical ID while allowing Update:Modify, the policy blocks any change that would cause a replacement or removal of the database but still permits in-place modifications such as parameter group updates. The DeletionPolicy attribute protects only when the resource is deleted (for example, during stack deletion) and does not stop replacements triggered by updates. Stack termination protection prevents the entire stack from being deleted but has no effect on individual resource replacements. UpdateReplacePolicy controls what happens to the old resource when a replacement occurs; it does not stop the replacement itself.