Looks like something got borked copy-pasting your snippet, BUT....we're using the datadog AWS cloudformation template in pulumi, and it also detects a change with every single pulumi preview/up -- however nothing is really changing when you drill down into the AWS resources in cloudformation