Thanks. You answered my question. My concern is basically ACL updates on two resources in two regions that is in one transaction.