I believe I found a bug on aws-native. In an AWS service catalog Application, Pulumi fails to update the tags (on the second

pulumi up

. after a change) Apparently, AWS adds

aws:servicecatalog:applicationName

and when updating the tags, I get

api error ValidationException: aws: prefixed tag key names are not allowed for external use.

The fix should be to remove "aws"-prefixed tags from the pulumi update. I am not very familiar with pulumi (or typescript for that matter) yet, but I'd love to fix this with a bit of help