Basic AuditEvent for a successful Update with a Patient subject

A basic AuditEvent profile for when a RESTful Update action happens successfully, and where there is an identifiable Patient subject associated with the Update of the Resource.

• Given a Resource Update is requested
• And that resource has a Patient subject or is otherwise associated with a Patient
• And the request is authorized

- Authorization failures should follow FHIR core Access Denied

• When successful

- Note a failure AuditEvent may follow this pattern, but would not be a successful outcome and should have an OperationOutcome

• Then the AuditEvent recorded will conform
• And where the server supports FHIR Versioning the AuditEvent should use the version specific id