add the update policy, which of course AWS implements in a different way than everything else