How do I prevent the resources in my CloudFormation stack from getting deleted or updated?

Resolution

To prevent deletion or updates to resources in a CloudFormation stack, you can:

• Set the DeletionPolicy attribute to prevent the deletion of an individual resource at the stack level.
• Use AWS Identity and Access Management (IAM) policies to restrict the ability of users to delete or update a stack and its resources.
• Assign a stack policy to prevent updates to stack resources.
• Turn on termination protection to prevent users from deleting the stack from the AWS CloudFormation console or AWS Command Line Interface (AWS CLI).

Related information

Update behaviors of stack resources

Modifying a stack template

Troubleshooting CloudFormation