I've had to create an explicit provider to pin the version because we had a lot of issues with differing versions of the AWS plugin between devs causing pulumi to freak out in hard-to-diagnose ways (separate issue - I'll post an issue once I have a reproducible example. Switching from the default to an explicit provider was also a gigantic pain).

resources:
  aws-provider:
    type: pulumi:providers:aws
    defaultProvider: true
    options:
      version: 6.66.3

However, this means that our config no longer works:

config:
  aws:profile: example
  aws:region: eu-west-1
  aws:allowedAccountIds:
    - 'xxxxxxx'

What's the config namespace for this new defined provider? Neither

aws

or

aws-provider

seem to work. For the moment I've had to reference the vars directly which feels a bit eh:

properties:
      region: ${aws:region}
      profile: ${aws:profile}
      allowedAccountIds: ${aws:allowedAccountIds}