I have a parent AWS account that has 2 child AWS accounts. 1 for prod and 1 for staging, the parent account has the user attached to it (currently) for pulumi to use. How can I make it so that we have both the parent and 1 of the children in use so that I can configure things for the production or staging environment?

Does anyone have an example where multiple routes from apigatewayv2 are implemented? for example:

const api = new awsx.apigateway.API(`airship-api-${NODE_ENV}`, {
  routes: [
    {
      path: "/",
      method: "GET",
      eventHandler: async (event: APIGatewayProxyEvent) => ({
        statusCode: HttpStatus.OK,
        body: "Hello, API Gateway V4!",
      }),
    },
    {
      path: "/api/named_users/associate",
      method: "POST",
      eventHandler: async (event: APIGatewayProxyEvent): Promise<any> => ({
        statusCode: HttpStatus.OK,
        body: JSON.stringify(await handleSetNamedUser(event)),
        isBase64Encoded: false,
      }),
    },
    {
      path: "/api/channels/tags",
      method: "POST",
      eventHandler: async (event: APIGatewayProxyEvent) => ({
        statusCode: HttpStatus.OK,
        body: JSON.stringify(await handleSetTags(event)),
        isBase64Encoded: false,
      }),
    },
  ],
});

I want to  make something if

Hey guys! Is it possible to enable high throughput FIFO queues with Pulumi at the moment?

Another question, do I have to import resources once per stack? It seems like Pulumi is attempting to create my imported resources 🤔

Hey, I'm using

aws.directconnect.GatewayAssociationProposal

to initiate a cross-account connection to a direct connect gateway. The problem I have though is that once I have accepted the proposal, Pulumi still tries to delete this resource when destroying the stack...

aws:directconnect:GatewayAssociationProposal (assocToMainDcGateway):
    error: deleting urn:pulumi:web-testing::web-platform-vpc::aws:directconnect/gatewayAssociationProposal:GatewayAssociationProposal::assocToMainDcGateway: 1 error occurred:
        * error deleting Direct Connect Gateway Association Proposal (49017cb1-925c-4ffb-aef2-4cdf0a853795): DirectConnectClientException: Direct Connect Gateway Association Proposal 49017cb1-925c-4ffb-aef2-4cdf0a853795 is not found

Is there a way to create a resource in Pulumi, but not register it to the Pulumi state?

Has anyone successfully updated the entries list of a ManagedPrefixList resource? Having issues with the versioning.

* error updating EC2 Managed Prefix List (pl-05402b9da4effacda): InvalidParameterValue: The specified value for version is not valid. The value must be greater than (1).
        	status code: 400, request id: c0d7b1b0-272b-4a22-a290-31752d07e859

hey Raghul, unfortunately it's not very clear what you're asking for here. CloudMap is exposed as "aws service discovery" in the AWS API, so try this resource: https://www.pulumi.com/docs/reference/pkg/aws/servicediscovery/

How are folks automating RDS/Aurora rollbacks? Restoring from an RDS snapshot creates a new db/cluster, so if the restore is done manually (via AWS console or cli), the pulumi stack state subsequently needs to be updated. Is there an elegant way to drive the rollback from pulumi itself?

What’s the general recommendation for changing versions of a component when AWS doesn’t support it? For example, I created an Aurora Postgres RDS at version 12.4, but I realize I actually want it at 10.14. Pulumi sees this as just a version update (it does not see it as a replace), but then it ends up with this error from AWS:

* Failed to modify RDS Cluster (aurora-postgres-ssa-tenants): InvalidParameterCombination: Cannot upgrade aurora-postgresql from 12.4 to 10.14

Should I just manually delete the RDS and then do a refresh? Something else?

Hey guys, I tried to update description of my security group and found that while running the update, it tried to delete the previous one. I did not want to delete the security group as I was using this with RDS and I stopped the update with Cmd+C. Now the problem is whenever I run

pulumi up

with other update code, I get

completing deletion from previous update

. But I don’t want to do this. how do I cancel this?

How do i get the current details from state? For example, I want to do

aws.iam.User.get(user.name)

but without passing the ID, and just get the state that is in pulumi rather than a live API call

Hi! When I want to modify RDS instance, it will be replace. But when it create replacement, a message 'error creating RDS DB Instance: DBInstanceAlreadyExists: DB Instance already exists' appears. is there some solutions to this?

Hi, i'm struggling to use providers to create resources on different AWS accounts, does anyone have a good guide / tutorial showing how to do it? I am passing a provider, but it creates the resources on the same account so I assume the provider is incorrect

When declaring and EC2 instance per two different availability zones, I need to determine which private subnet id in the VPC is available in the availability zone for that EC2 instance. Is there a way to do this by interrogating the resources?

Hi everyone! I’m facing an issue when trying to reference an AWS ECS Cluster from another stack. I have a stack that exports the id of that cluster and another one that should use that cluster when creating an ECS FargateService. I tried to use get method to get that cluster by id, but the type of the cluster that’s being returned

aws.ecs.Cluster

is not compatible with what’s required when creating an ECS FargateService

awsx.ecs.Cluster

. Any suggestions / guidance would be appreciated, thanks in advance! (more details in 🧵 )

Hello Team, I am trying to understand broader way of pulumi apply call here. i have to statically define pulumi apply call for each instance of the class as shown in an example. when i loop on the apply, it picks up the last instance of class but skips the previous. is there anyway we can use the pulumi apply call dynamically and do not have to define statically for n number of instances of class?

import pulumi
import pulumi_aws as aws  

asg_name = {}
class ASG():

    def __init__(self):
        self.name = name 

    # Creating Autoscaling.
    asg_name[name] = aws.autoscaling.Group(.....defs....)

inst1 = ASG(idx1)
inst2 = ASG(idx2)  
inst3 = ASG(idx3)

defineASG(a,inst_type)
    ## Boto API create EC2 tags ## 

asg_id = {}
asg_id['idx1'] = autoScale['idx1'].name.apply(
    lambda a: defineASG(asg=a, inst_type='idx1')

asg_id['idx2'] = autoScale['idx2'].name.apply(
    lambda a: defineASG(asg=a, inst_type='idx2')

asg_id['idx3'] = autoScale['idx3'].name.apply(
    lambda a: defineASG(asg=a, inst_type='idx3')

hi room, i am seeing

pulumi up

trying to replace my current-state aws providers with an older provider version (even though i have the newer version of the plugin installed) … wondering how this is controlled and how i can get my

pulumi up

to not downgrade my providers (details in thread)

Hi! When I modify RDS instance class, Pulumi tries to delete and replace my instance. this will make my tables in my db disappear. I need to modify my instance as AWS make ... only update... someone tried to do this?

I’m not sure if this is only for aws, or if its for other services also, but I’m running into an issue when trying to deploy my aws resources, instead of updating, it’s trying to create new ones. This used to update, but now its trying to create new resources. Does anyone know how to trace back to what happened, and point back to the original resources?

Hello, everyone.I've got an issue, so let me ask a question. To create AWS resources, I tried to perform

pulumi up

on an EC2 instance via instance profile with AdministratorAccess policy attached.I encountered following error when exec.

Previewing update (main)

View Live: <https://app.pulumi.com/xxxxxx/pulumi-go/main/previews/866e47e5-b3e3-45c4-85e7-14478267abea>
:
Diagnostics:
  aws:iam:Role (sample-role):
    error: 1 error occurred:
        * error configuring Terraform AWS Provider: no valid credential sources for Terraform AWS Provider found.
    
    Please see <https://registry.terraform.io/providers/hashicorp/aws>
    for more information about providing credentials.
    
    Error: NoCredentialProviders: no valid providers in chain. Deprecated.
        For verbose messaging see aws.Config.CredentialsChainVerboseErrors

After I created IAM user to generate AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY and configured to ~/.aws/credentials, It worked properly. Sorry to ask such a basic question, but can' I perform 'pulumi up' with instance profile??

Hi Folks, I have a question about https://www.pulumi.com/docs/reference/pkg/aws/s3/bucket/#bucketwebsite and the routing_rules property. is there any reason there is not specific typed object for this?

Hi! I have an stack with rds cluster with the name rds-component. When I run newly this part of code

const instanceCluster = new aws.rds.Cluster('rds-component', Args.cluster, opts);

next error appears.

Previewing update (develop):
     Type                 Name              Plan        Info
     pulumi:pulumi:Stack  qdevelop  running     }
panic: fatal: An assertion has failed
goroutine 242 [running]:
<http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)>
	/Users/runner/work/pulumi/pulumi/sdk/go/common/util/contract/failfast.go:23
<http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assert(...)|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assert(...)>
	/Users/runner/work/pulumi/pulumi/sdk/go/common/util/contract/assert.go:26
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.processIgnoreChanges|github.com/pulumi/pulumi/pkg/v3/resource/deploy.processIgnoreChanges>(0xc001ca1650, 0xc0013b04e0, 0xc0016b7e30, 0x1, 0x1, 0x1, 0xc, 0xc000de1b00)
	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:1122 +0x590
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).generateSteps(0xc001bf5d40|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).generateSteps(0xc001bf5d40>, 0x7f390afd4500, 0xc0016b7ec0, 0x1, 0xc001373500, 0xc0005d79f8, 0x44a937, 0xc001728900)
	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:240 +0x2529
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).GenerateSteps(0xc001bf5d40|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).GenerateSteps(0xc001bf5d40>, 0x7f390afd4500, 0xc0016b7ec0, 0x7f390afd4500, 0xc0016b7ec0, 0x1, 0x2, 0x469540)
	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:152 +0x5a
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).handleSingleEvent(0xc001736018|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).handleSingleEvent(0xc001736018>, 0x20d25e0, 0xc0016b7ec0, 0x0, 0x2)
	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:372 +0x13f
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute.func3(0xc001728900|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute.func3(0xc001728900>, 0xc001736018, 0xc00172a810, 0x2100dd0, 0xc001378900, 0x0, 0x0, 0x2100e78, 0xc001374f60, 0x0, ...)
	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:242 +0x20c
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute(0xc001736018|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute(0xc001736018>, 0x2100e78, 0xc001374f60, 0x7f390b2dc398, 0xc001b80780, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, ...)
	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:258 +0x7e5
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*Deployment).Execute(...)|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*Deployment).Execute(...)>
	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment.go:405
<http://github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run.func1|github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run.func1>(0x210b368, 0xc001b80780, 0xc00016fcc0, 0x2100e78, 0xc001374f60, 0xc001374f01, 0xc00172a5b0, 0xc0017283c0)
	/Users/runner/work/pulumi/pulumi/pkg/engine/deployment.go:260 +0x287
created by <http://github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run|github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run>
	/Users/runner/work/pulumi/pulumi/pkg/engine/deployment.go:245 +0x308

https://www.pulumi.com/docs/reference/pkg/aws/acmpca/certificate/ I use this example, but I don’t see a certificate in PCA that it says it created. Pulumi’s state thinks the resource is created, but the web console doesn’t link to the cert.

I’m trying to configure Trusted Devices in AWS Workspaces. It looks like the enum for device type

DeviceTypeWindows

and

DeviceTypeOSX

in

workspaceAccessProperties

have a 3rd value supported,

TRUST

but it’s only mentioned in a comment about the properties, it’s not in the SDK’s documented types: https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/workspaces.html#WorkSpaces.Client.modify_workspace_access_properties

response = client.modify_workspace_access_properties(
    ResourceId='string',
    WorkspaceAccessProperties={
        'DeviceTypeWindows': 'ALLOW'|'DENY',  # should also have |'TRUST'
        'DeviceTypeOsx': 'ALLOW'|'DENY',      # should also have |'TRUST'
        'DeviceTypeWeb': 'ALLOW'|'DENY',
        'DeviceTypeIos': 'ALLOW'|'DENY',
        'DeviceTypeAndroid': 'ALLOW'|'DENY',
        'DeviceTypeChromeOs': 'ALLOW'|'DENY',
        'DeviceTypeZeroClient': 'ALLOW'|'DENY',
        'DeviceTypeLinux': 'ALLOW'|'DENY'
    }
)

To restrict WorkSpaces access to trusted devices (also known as managed devices) with valid certificates, specify a value of TRUST . For more information, see Restrict WorkSpaces Access to Trusted Devices .

With that problem, is there any way I can bypass the validation below that’s blocking me, and attempt to apply the “invalid” value?

aws:workspaces:Directory (client-experience-workspaces-directory):
    error: aws:workspaces/directory:Directory resource 'client-experience-workspaces-directory' has a problem: expected workspace_access_properties.0.device_type_osx to be one of [ALLOW DENY], got TRUST. Examine values at 'Directory.WorkspaceAccessProperties.DeviceTypeOsx'.

https://www.pulumi.com/docs/reference/pkg/aws/ec2clientvpn/endpoint/ Where does

aws_acm_certificate.root_cert.arn

come from?

where are the docs for lamda.CallbackFunction ? Using it like this.

import {lambda} from "@pulumi/aws";
...
new lambda.CallbackFunction...

but at the aws lambda docs page there's no "CallbackFunction" defined

Hi,does anyone know how can I resolve value from SSM parameter in pulumi? We have bunch of secrets stored in SSM and I do not want to move them out.

Hey hey ! Me & my teammates are eagerly waiting for the v3.46.0 aws provider to be integrated (See issue); I've opened a PR (to the upstream-v3.45.0 branch, though, as I don't have permissions to create new ones) if it helps: https://github.com/pulumi/terraform-provider-aws/pull/63 Would really appreciate if this could be integrated in the near future. Thanks a ton for your hard work and awesome product !

Hi, using the pulumi-aws sdk for python. I just updated to 4.8.0, and pulumi 3.5.1, and I am unable to run a pulumi up for s3 aws bucket that has routing rules. The preview passes, but on up I get the following error.

* updating urn:pulumi:s3-bucket::pulumi-aws-s3::pulumi:providers:aws$aws:s3/bucket:Bucket::us-east-1-bucket: 1 error occurred:
	* json: cannot unmarshal object into Go value of type []*s3.RoutingRule

From what I can tell is that there isnt an args for routing rules, and it expects a json string, which has me confused. Is there supposed to be something along the lines of RoutingRulesArgs?

It turns out that this is expecting the routing_rules as a string which is kinda unfortunate