I seem to always hit this error:

aws:ec2:SecurityGroupRule (fib-lb-listener-external-0-ingress):
    error: Plan apply failed: [WARN] A duplicate Security Group rule was found on (sg-0eb9f6d1b7d9a192b). This may be
    a side effect of a now-fixed Terraform issue causing two security groups with
    identical attributes but different source_security_group_ids to overwrite each
    other in the state. See <https://github.com/hashicorp/terraform/pull/2376> for more
    information and instructions for recovery. Error message: the specified rule "peer: 0.0.0.0/0, TCP, from port: 80, to port: 80, ALLOW" already exists

I'm using pulumi 0.17.8, awsx 0.18.3. It seems like it has something to do with

external: true

passed to

createListener

and explicitly passing a security group to

awsx.elasticloadbalancingv2.ApplicationLoadBalancer

.