This message was deleted.

Oh I guess

ignoreChanges

can be useful here https://www.pulumi.com/docs/concepts/options/ignorechanges/

Yes. Another idea is to provide the AMI ID as a value in your project config, so you decide when to update the AMI.

Thanks! That would still have the problem where the AMI no longer exists. In the code, we have to get AMI (

ec2.get_ami

) first

Yep, you would need to do that. Something I've been meaning to try in one of my projects is to have a new project whose only job is to export the approved AMI, and a

pulumi up

would export the updated AMI ID as a stack reference. Any

pulumi up

on related projects would then get the updated AMI. This two-stage process is essentially an automated alternative to what we're currently doing: approving a new AMI is separate from choosing to update a stack.

Looks like

ignore_changes

may not work for us.

ec2.get_ami

requires

InvokeOptions

, which does not support

ignore_changes

😞

Yes, you would use ignore_changes on the AMI ID of the AMI you're deploying, not on the call to get_ami. That is a read-only call, so nothing changes 🙂

Ah right