Let's see where this request needs to fit.
Before changing anything, we need to understand what surrounds it.
Existing architecture
Code structure
Technologies in use
Dependencies
Processed data
Storage
Existing files
Data flows
Business logic
Existing APIs
Automated tasks
Active processes
Authentication
Permissions
Input validation
Sensitive access
Hosting
Server configuration
Backups
Production environment
Running services
Availability constraints
A change never exists in isolation. Its impact depends on the system it needs to integrate with.
Does the request still seem that simple?