It looks like this might be happening for other AWS resources (roles, and some account-wide config). Could it be something to do with pulumi cloud? I don’t remember seeing this behavior before.