since upgrading to pulumi 3, i haven't been able to get my CD to do AWS lambda deployments, i keep getting:

while waiting for function (*****) update: ResourceNotReady: exceeded wait attempts

, i presume this is an IAM permission issue with some new polling call (can reproduce if use CD creds locally) that has been introduced as it works just fine with my personal credentials (root) locally, but it is hard to debug this issue as I don't seem to get any useful output doing

pulumi up -v=9 -p 1 --yes