How to prevent CloudFormation stack exception (accidentally)?

Question

CloudFormation clouds are great for automation, but the problem I see with them is how easy it is to delete them and, in turn, cascade the deletion of other resources.

I already found a solution to the last problem, you can protect each of the resources by changing the delete policy. But what about the stack as a whole? Is it possible to protect him?

Answer 1

I think the only way is to restrict access to the IAM users that you use. You can remove the “Delete Stacks” permission from all relevant users.

Answer 2

AFAIK , . , , "DeletionPolicy" : "" .

Answer 3

- -, , CloudFormation. , - stack :

String: name -- name of the stack
String: template -- JSON template for the stack
String: createdby -- name of the user that created the stack
Boolean: protected -- true if protected.

, / , , AWS IAM, .

, .