This message was deleted.

@broad-dog-22463 any advice here ? Can we create and then update a

Resource

in a single Pulumi template ?

@bright-orange-69401 I'm really interested on the answer to your question. If you find a solution, please, let us know.

@important-ram-83431 I'm still working on it but the solution we've found is to create another

Resource

via a Dynamic Provider that merely performs step 3 (validation of the SAML) It's a similar process as the one used by Terraform & Pulumi for AWS ACM CertificateValidation The

Resource

just finds the SAML App by its ID and updates it with the metadata obtained in step 2 : it does not actually provision anything and does not have a

delete

method

I'll try it and give you feedback. By now, I set those steps as "manual" (yes, it also sounds terrible to me) and I'm working on other steps of the Pulumi deployment.

BTW if you problem is specific to Okta, there's an alternative method: https://controltower.aws-management.tools/infrastructure/sso/okta_sso/