I have been building an integration with GitHub actions and pulumi to update our

awsx:ecs:FargateService

with the images that are pushed to ECR separate from pulumi. So the workflow in github actions involves several build steps and finally pushing the images to ECR using one IAM role. Then after that has completed we use the pulumi github action with a different IAM role to run

pulumi up

with the respective image tags for different services via environment variables to update the images for the task definitions. I noticed that that this takes around ~3-4 minutes for each service, and it has me wondering if others have encountered this? Is there an alternative approach that is better?