What is the result of this policy?

A SysOps administrator applies the following policy to an AWS CloudFormation stack:

What is the result of this policy?
A . Users that assume an IAM role with a logical ID that begins with "Production" are prevented from running the update-stack command.
B. Users can update all resources in the stack except for resources that have a logical ID that begins with "Production".
C. Users can update all resources in the stack except for resources that have an attribute that begins with "Production".
D. Users in an IAM group with a logical ID that begins with "Production" are prevented from running the update-stack command.

View Answer

Answer: B