I don't want to accidentality delete our production website, so I'd rather ask before I do anything involving production stack and protect flag:
How do I make my production stack protected and dev stack unprotected by default?
01/10/2022, 8:23 PM
You can use the autotag that Joe Duffy published, and change it to set the
opt to true in prod.
Or you can change the privileges on the role that you assume to deploy prod, but that would be pretty tricky to get right.. you would want it to be able to delete some things (e.g. security group rules) and not other things (e.g. RDS instances).