! - The policies I would have to change weren't listed in the sample. How could I know they exist?
2 - The logs showed something different from what was actually being checked.
3 - It is checking attributes I didn't set for the resource.
Number 1 and 2 are not acceptable.
Number 3 is bad, but could be acceptable if 1 and 2 did not happen; so the operator could see what is being checked and do something about it.
That is obvious. The problems in this case are:
! - The policies I would have to change weren't listed in the sample. How could I know they exist?
2 - The logs showed something different from what was actually being checked.
3 - It is checking attributes I didn't set for the resource.
Number 1 and 2 are not acceptable.
Number 3 is bad, but could be acceptable if 1 and 2 did not happen; so the operator could see what is being checked and do something about it.