This message was deleted.

Delete before replace is the answer here, what didn’t work about that?

That works only if you update the same policy, in this case I was generating a new policy (with a new id) to attach to the same bucket. When doing the

pulumi up

command, first pulumi create the new BucketPolicy (and I suppose attach it to the bucket) and then remove the old one. But working this way, the bucket results with no policy at all.

Why wouldn’t you just modify the existing policy? Is there a reason you need to define and entirely new policy for this?

yeah, the reason was a wrong configuration. We were applying two policies to some buckets instead of working with multiple statements within the same policy, Pulumi created the two policies correctly, but the latest policy was the only one actually applied to the bucket. Therefore I had to fix the bug by creating a new policy with multiple statements inside. But this generated the issue above.

hrm, maube I’m not quite following what’s happening here, do you have a code example I can look at?

I can recreate the scenario somehow, but I can't share the actual code unfortunately. Gimme me a bit of time