Need a sanity check... Using EC2 Metadata Credentials for pulumi up/preview/destroy is supported right?

yes but the defaults were changed semi-recently. Pulumi used to check for that information by default but was a perf hit for the providers that didn't need those checks. So when you instantiate your aws provider you need to set the appropriate skip checks to false. So set

SkipMetadataApiCheck = false

or

SkipGetEc2Platforms = false

in your provider because they now default to

true

.

Well that would do it, we just upgraded from the 2.x aws provider. Thanks! I've been hitting my head against the wall trying to figure out what was up.