I'm using pulumi.awsx's SecurityGroups, and

createIngressRule()

etc. For at least the rules defined using

location

and

cidrBlocks

, if I update the cidrBlocks, then it causes duplicated security group rules, and errors out. I can't add

deleteBeforeCreate

because the

opts

field on this class takes a CustomResourceOptions, not a ComponentResourceOptions.

Sounds like a bug, but is it possible you're creating the same rule with overlapping cidr blocks? I seem to recall I've run into that in the bast and the error message from AWS wasn't immediately obvious that was the issue.