No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Interesting. Running `pulumi up` seems to have essentially imported it since it already created it.

On a second run, it starts to try making changes

GroupMembership isn't an AWS resource, it's a Terraform construct to support the `addUserToGroup` SDK call. I've never imported IAM groups, but hopefully when you ran that import, the GroupMembership code should have been produced at the same time?

If not, you'll have to write the GroupMembership yourself.

I had already written the group membership, and was planning to import. Couldn't get the import to work, so I just ran update and it seemed to be fine.

The fact that it isn't a real resource and wraps the addUser SDK makes a ton of sense and I think explains all the behavior we are seeing