A Large Financial Company Is Deploying Applications That Consist of Amazon

A large financial company is deploying applications that consist of Amazon EC2 and Amazon RDS instances to the AWS Cloud using AWS CloudFormation. The CloudFormation stack has the following stack policy: The company wants to ensure that developers do not lose data by accidentally removing or replacing RDS instances when updating the CloudFormation stack. Developers also still need to be able to modify or remove EC2 instances as needed. How should the company change the stack policy to meet these requirements?

A) Modify the statement to specify "Effect": "Deny", "Action":["Update:*"] for all logical RDS resources.
B) Modify the statement to specify "Effect": "Deny", "Action":["Update:Delete"] for all logical RDS resources.
C) Add a second statement that specifies "Effect": "Deny", "Action":["Update:Delete", "Update:Replace"] for all logical RDS resources.
D) Add a second statement that specifies "Effect": "Deny", "Action":["Update:*"] for all logical RDS resources.