Anton Tayanovskyy

Could you provide `pulumi about` with the affected versions? This sounds pretty serious, would be great to confirm affected version.

Here's what I tried to repro: ```typescript import * as aws from "@pulumi/aws-native"; // Create a role const role = new aws.iam.Role("myRole", { assumeRolePolicyDocument: JSON.stringify({ Version: "2012-10-17", Statement: [ {...

Perhaps you could provide a more detailed repro for us to try, or possibly there is some eventual consistency involved here, such as `pulumi refresh` not detecting tag removal immediately...

Very strange. I'm sorry this keeps happening. Since we cannot repro it may be rather difficult to make progress but I will ask around our in-house AWS experts. If you...

Thanks for this bug report @Jimmy89 At a glance: https://github.com/pulumi/pulumi-aws-native/blob/63225188ce455fe8063b4c224df4ada2a85dc1ba/aws-cloudformation-schema/aws-cognito-managedloginbranding.json#L92 is listing ClientId under createOnlyProperties. This code here is supposed to mark createOnlyProperties as ReplaceOnChanges under Pulumi: https://github.com/pulumi/pulumi-aws-native/blob/63225188ce455fe8063b4c224df4ada2a85dc1ba/provider/pkg/schema/gen.go#L698 As indeed...

Thanks Cory I misdiagnosed the code I was reading. https://github.com/pulumi/pulumi-aws-native/issues/2094 is now rewritten, there is still a cosmetic opportunity to improve, but it is a red herring with respect to...

This seems to reproduce upstream https://github.com/hashicorp/terraform-provider-aws/issues/39477 and we inherit the behavior.

Might not be ideal but can workaround with: ```typescript import * as pulumi from "@pulumi/pulumi"; import * as aws from "@pulumi/aws"; import * as awsx from "@pulumi/awsx"; const example =...

It appears that the upstream provider is designed to treat changes to body as in-place updates (it is not marked ForceNew). In-place updates do not cascade in Pulumi to dependent...

Digging a bit further into this surprising behavior. So when the body of aws.apigateway.RestApi changes, without any resource options, Pulumi executes an Update plan just on the RestApi resource. It...