AWS Service Catalog Resource Update Constraints