would prefer to be explicit as to when to deploy the lambda as opposed to doing every time i do a 'pulumi up' for some other entirely unrelated update