No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Hello. I am trying to build an Azure Infrastructure with pulimi using C# and I noticed some resources change each time I do a pulumi up, even if I did not change anything in the code. For instance, the ApiKey from Pulumi.Azure.AppInsights "needs" to be modified (readPermissions) each time I preview changes.

Could you share the code to reproduce that?

And the detailed diff that you see on preview

I did a refresh after but that did not solve the issue. And it would be weird to have to do a refresh after a deploy without modifications of the resources.
The code to reproduce the error  : <https://gist.github.com/TechWatching/a49e0f450600b3f5db17dcea8d2e4a7b>

image.png

This is mentioned in <https://github.com/terraform-providers/terraform-provider-azurerm/issues/2547#issuecomment-449406507>

It looks like Azure adds those permissions when you assign `api` permission

You should probably change the code to `ReadPermissions = { "api", "draft", "extendqueries", "search", "aggregate"  }`

Thanks for the tip :slightly_smiling_face: I did not see the issue.