Setting and overriding stack policies

After you create a stack policy, you associate it to a stack. If you are assigning the stack policy to an existing stack, you must use the AWS Command Line Interface (AWS CLI). However, if you are assigning the policy at the time of stack creation, you can use either the CloudFormation console or the AWS CLI. For instructions, see Setting a stack policy in the CloudFormation documentation.

When you do want to allow users to update or delete the resources in the stack, you need to temporarily override the stack policy. This override allows you to perform otherwise denied actions on the protected resources in that stack. For instructions, see Updating protected resources in the CloudFormation documentation.