core: Indicate change of stack termination protection

[azatoth]

Describe the feature

When issuing cdk diff, it should indicate whether Stack Termination Protection has been enabled or disabled for a stack.

Use Case

Currently, when you are changing termination protection for a stack, there's no indication, neither when running cdk diff, nor when running cdk deploy that this change is going to be made.

Proposed Solution

• Have cdk diff output that termination protection is changing
• Have cdk deploy not stating (no changes) if termination protection is changed

Other Information

I tried to gauge support for this in #31928 but I never got any response.

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.165.0

Environment details (OS name and version, etc.)

Ubuntu 22.04.5 LTS

[ashishdhingra]

Setting terminationProtection to true (default false):

const app = new cdk.App();

new CdktestStack(app, 'CdktestStack', {
  env: { account: process.env.CDK_DEFAULT_ACCOUNT, region: process.env.CDK_DEFAULT_REGION },
  terminationProtection: true
});

doesn't report the change when running cdk diff:

Stack CdktestStack
Parameters
[+] Parameter BootstrapVersion BootstrapVersion: {"Type":"AWS::SSM::Parameter::Value<String>","Default":"/cdk-bootstrap/hnb659fds/version","Description":"Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"}


✨  Number of stacks with differences: 1

Appears to be useful feature to report change in terminationProtection for a stack.