An engineer must update a production CloudFormation stack. The team requires a review of which resources will be added, modified, or replaced before applying the update. Which workflow best satisfies this control?

1. Create a change set from the proposed template and parameters, review it, and execute it only after approval.
2. Execute UpdateStack first and review the event history afterward.
3. Run drift detection and assume it describes every effect of the proposed template.
4. Run ValidateTemplate and treat a valid response as a complete preview of resource replacements.