CanReplace
Delete+recreate to inherit name/identity/trust (config-drift escalation).
Identity
── CanReplace ──▸
*
Source types
IdentityTarget types
*States
ACTIVE
CONDITIONAL
POTENTIAL
BLOCKED
UNKNOWN
Derivation
| nature | explicit |
|---|
Rules that emit CanReplace 1
A principal that can create a resource type and modify the instance can delete+recreate it to inherit its identity/trust.
derived