feat(core): set (default) stack termination protection on (parent) stage level

[aripalo]

Issue

Closes #31449.

This is a new pull request, since the previous one did not receive any activity/communication and had some CI quality gate check issues, so trying again if this time there's a change for getting this merged!

Reason for this change

New feature: Enable setting Stack (default) termination protection on (parent) Stage level.

Description of changes

Changes to cdk.Stage:

1. Introduce new optional terminationProtection into StageProps
2. The Stage exposes the value as a readonly property
3. When nesting Stages: A Stage can inherit the terminationProtection property from parent stage, but also it can be overriden by child Stages

Changes to cdk.Stack:

1. Stack inherits the terminationProtection from parent Stage – unless overriden on Stack level
2. If terminationProtection is not set in the Stack level or in any of its parent Stages, the value will default to false as before – hence this is NOT a breaking change.

Describe any new or updated permissions being added

None.

Description of how you validated changes

I've originally done a PoC in my own codebase (by extending cdk.Stage).

After modifications into aws-cdk codebase:

• I've added new unit tests into:
  • packages/aws-cdk-lib/core/test/stage.test.ts
  • packages/aws-cdk-lib/core/test/stack.test.ts
• I've added new integ-test into packages/@aws-cdk-testing/framework-integ/test/core/test/integ.stage-termination-protection.ts (which verifies the termination protection) and updated the snapshots

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

(This review is outdated)

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: 67387b0
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository