Details
Description
Updates to service definitions should not allow updating names of the following components:
- Resources
- Access types
- Policy conditions
- Data Masks
In general, these updates are seldom needed and can be avoided by careful design of service definition. Also, with a de-normalized database schema for storing policies, it is expensive and inefficient to maintain and lookup mapping from internal IDs to names for each of these components. By not allowing updates to these names, there is no need to maintain ( or reference) such mappings after updating (or reading) policy when using de-normalized database schema.