# Scope of changes performed by EDI Cloud Operations ECO deploys or updates AWS resources only in the following situations through a predefined access model: + To deploy and update tools and resources required by ECO to service EDI. + As part of EDI monitoring in response to events and alarms. + To remediate security issues as part of responses to violations in EDI such as making noncompliant resources conform to security best practices. + During remediation and restoration as part of an incident response. + During deployment, application patching, and updates for major and minor releases of EDI. + When configuring the following ECO features: + Alarm manager + Resource tagger + Resource scheduler + Backup plans ECO doesn't deploy or update resources outside the preceding situations.