Post

So you want to protect your CloudFormation stack with policy to restrict "delete-on-change" logic. Easy, just delete your stack and add a policy.