A production stack contains a critical database. The team wants to restrict accidental update actions against that resource while permitting approved changes through a controlled process. Which feature should it evaluate?

1. A public bucket policy on the database log archive.
2. Only a local comment saying do not modify database.
3. Assume a stack policy replaces every backup and recovery requirement.
4. An appropriate stack policy protecting update actions for the critical resource.