hello everyone! I’m trying to replace default fargate ecs role, with my own and run into an issue that the role created by default cannot be removed properly

error: deleting urn:pulumi:dev::ice-online-apollo-pt-imex-adapter::awsx:x:ecs:FargateTaskDefinition$aws:iam/role:Role::role-name: 1 error occurred:
    	* error deleting IAM Role (role-id): DeleteConflict: Cannot delete entity, must detach all policies first.
    	status code: 409, request id: d3b77f2a-176a-4d0c-ae6f-03d773f32371

looks like it might be a terraform bug, is there any known workaround or do I need to manually remove it?

you'll need to manually remove it. Did something else attach a policy to this role outside Pulumi?

not that I’m aware of, but I will double check that