https://pulumi.com logo
#general
Title
# general
h

high-grass-3103

01/10/2022, 7:53 AM
I don't want to accidentality delete our production website, so I'd rather ask before I do anything involving production stack and protect flag: How do I make my production stack protected and dev stack unprotected by default?
👀 1
l

little-cartoon-10569

01/10/2022, 8:23 PM
You can use the autotag that Joe Duffy published, and change it to set the
protect
opt to true in prod.
Or you can change the privileges on the role that you assume to deploy prod, but that would be pretty tricky to get right.. you would want it to be able to delete some things (e.g. security group rules) and not other things (e.g. RDS instances).