I'm getting an error saying that it is refusing to delete a protected resource but it's not showing up in the diff so I don't know why it is being deleted. Any idea what to look for?

What did the output look like? Very surprising you wouldn’t get a preview but would then get this message during the update.

I was using

pulumi up --diff

. The output was a diff as I had other changes but the OU definitely wasn't in there. The same thing happens for an Account. I didn't check whether the

details

option showed the same thing. Unfortunately I have too many outstanding changes to reproduce it now but I think it should be easy to reproduce by: 1. Manually create OU

root/A

and

root/B

2. Create the OU in pulumi as

root/A

and

root/A/B

3. Import the OUs 4. Run

up --diff