What is the result of this policy?

A SysOps administrator applies the following policy to an AWS CloudFormation stack:

What is the result of this policy?
A . Users that assume an IAM role with a logical ID that begins with "Production" are prevented from running the update-stack command.
B . Users can update all resources in the stack except for resources that have a logical ID that begins with "Production".
C . Users can update all resources in the stack except for resources that have an attribute that begins with "Production".
D . Users in an IAM group with a logical ID that begins with "Production" are prevented from running the update-stack command.

View Answer

Answer: B